335 matches found
CVE-2005-2077: Undefined Security Weakness
Cross-site scripting XSS vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrary web script or HTML via the error parameter...
Hosting Controller 6.1 - error.asp Cross-Site Scripting
Hosting Controller 6.1 - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/14080/info Hosting Controller is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'error.asp' script. A...
Cross-Site Scripting (CSS) in Hosting Controller All Version and hot fix it hehe ;)
Cross-Site Scripting CSS in Hosting Controller All Version and hot fix it hehe ; [email protected] Ashiyane Security Team SegmentationFault Group iam sun-os hehe :P Greetz to : S4P0 - failed - Xsupr3mo - Status-x - Stealh Greetz to : berhooz - nima - ehsan - Mehrtash and...
Hosting Controller 6.1 - 'error.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14080/info Hosting Controller is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'error.asp' script. An attacker may leverage this issue to have arbitrary...
CVE-2005-1788
The CVE-2005-1788 entry describes an SQL injection vulnerability in resellerresources.asp within Hosting Controller 6.1 Hotfix 2.0, exploitable via the jresourceid parameter. Remote attackers can execute arbitrary SQL commands through this input. Affected software/component: Hosting Controller 6....
CVE-2005-1788
SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter...
CVE-2005-1788
SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter...
CVE-2005-1788: Undefined Security Weakness
SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter...
CVE-2005-1784
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp...
CVE-2005-1784
CVE-2005-1784 affects Hosting Controller 6.1 HotFix 2.0 and earlier. According to connected sources (Red Hat, CVE lists, and Nessus), a remote attacker can steal passwords and gain privileges by submitting a modified emailaddress parameter in the updateprofile action of UserProfile.asp. The under...
CVE-2005-1784: Undefined Security Weakness
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp...
Hosting Controller 6.1 - User Profile Unauthorized Access
Hosting Controller 6.1 - User Profile Unauthorized Access source: https://www.securityfocus.com/bid/13816/info Hosting Controller is prone to an unauthorized access vulnerability. Reportedly an authenticated user can modify other user's profiles. This issue is due to a failure in the application ...
[SA15540] Hosting Controller "jresourceid" SQL Injection Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Hosting Controller 6.1 - User Profile Unauthorized Access
source: https://www.securityfocus.com/bid/13816/info Hosting Controller is prone to an unauthorized access vulnerability. Reportedly an authenticated user can modify other user's profiles. This issue is due to a failure in the application to perform proper authentication before providing access t...
Hosting Controller < 6.1 Hotfix 2.1 Multiple Vulnerabilities
According to its version number, the version of Hosting Controller on the remote host suffers from multiple vulnerabilities: - An authenticated user can modify another user's profile, even an admin's, recover his/her password, and then gain access to the affected application as that user. - An...
Hosting Controller 6.1 - resellerresources.asp?jresourceid SQL Injection
Hosting Controller 6.1 - resellerresources.asp?jresourceid SQL Injection source: https://www.securityfocus.com/bid/13806/info Hosting Controller is reported prone to multiple vulnerabilities. These issues can allow an attacker gain unauthorized access to data and carry out SQL injection attacks...
Hosting Controller 6.1 - plandetails.asp Information Disclosure
Hosting Controller 6.1 - plandetails.asp Information Disclosure source: https://www.securityfocus.com/bid/13806/info Hosting Controller is reported prone to multiple vulnerabilities. These issues can allow an attacker gain unauthorized access to data and carry out SQL injection attacks. These...
Hosting Controller 6.1 - 'plandetails.asp' Information Disclosure
source: https://www.securityfocus.com/bid/13806/info Hosting Controller is reported prone to multiple vulnerabilities. These issues can allow an attacker gain unauthorized access to data and carry out SQL injection attacks. These issues reportedly affect Hosting Controller 6.1 HotFix 2.0 and prio...
Hosting Controller 6.1 - 'resellerresources.asp?jresourceid' SQL Injection
source: https://www.securityfocus.com/bid/13806/info Hosting Controller is reported prone to multiple vulnerabilities. These issues can allow an attacker gain unauthorized access to data and carry out SQL injection attacks. These issues reportedly affect Hosting Controller 6.1 HotFix 2.0 and prio...
CVE-2005-1784
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp...