CVE-2012-0975

Cross-site scripting XSS vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote attackers to inject arbitrary web script or HTML via the showseries parameter...

CVE-2012-0975: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote attackers to inject arbitrary web script or HTML via the showseries parameter...

PT-2012-2981

Name of the Vulnerable Software and Affected Versions Image Hosting Script DPI versions 1.0 through 1.3 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the showseries...

mathopd -- directory traversal vulnerability

Michiel Boland reports: The software has a vulnerability that could lead to directory traversal if the '' construct for mass virtual hosting is used...

DreamHost Warns of Attack, Forces Customer Password Changes

Attackers were able to compromise a database at DreamHost, a large hosting provider, late last week and the company is forcing all of its customers to change their passwords for their FTP and shell accounts as a precautionary measure. DreamHost did not provide many details about what happened in...

Advanced Image Hosting Script - SQL Injection

Exploit Title: AIHS Advanced Image Hosting Script SQL Injection Vulnerability Author: Robert Cooper Robert.Cooper at areyousecure.net Software Link: http://yabsoft.com/ Tested on: Linux/Windows 7 Vulnerable File: viewcomments.php Vulnerable parameter: viewcomments.php?gal=gallery id PoC:...

Free Image Hosting Shell Upload

============================================ Free Image Hosting Script Remote File Upload Vulnerability ============================================ Exploit Title: Free Image Hosting Script ALL VERSIONS Remote File Upload Vulnerability Date: 26/12/11 Author: ySecurity Vendor or Software Link:...

Whois Cart Billing Cross Site Scripting / Disclosure

Title: ====== Whois Cart Billing - Multiple Web Vulnerabilities Date: ===== 2011-12-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=343 VL-ID: ===== 343 Introduction: ============= Whois.Cart is a client/administrator tool that facilitates the many tasks involved in...

PT-2011-5071

Name of the Vulnerable Software and Affected Versions Parallels Plesk Panel version 10.2.0 build 20110407.20 Description The issue allows remote attackers to obtain potentially sensitive information by reading a web page that includes a database connection string within the Control Panel. This is...

Breach confirmed in GlobalSign, SSL certificates not compromised

Breach confirmed in GlobalSign, SSL certificates not compromised GlobalSign said on Tuesday that the SSL certificate and key for www.globalsign.com may have been exposed after a hack on an external server in September. However, the company said that after investigating the breach it has found no...

whmcs hosting management system 0day and fix-vulnerability warning-the black bar safety net

First register an id Submitted a ticket as follows...

WebIndia Hosting Cross Site Scripting / SQL Injection

Exploit Title: WebIndia Hosting Multiple Vulnerability Date: 06.12.2011 - 17:55 Author: 3spi0n Software Website: http://www.newindiahosting.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Dorks: "Powered by New India Hosting" Vulnerable File : | buy.php | $ Demo Sites:...

CVE-2011-4572

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

CVE-2011-4572

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

CVE-2011-4572

CVE-2011-4572: A cross-site scripting (XSS) vulnerability exists in inc/tesmodrewite.php of CF Image Hosting Script versions 1.3.82 and 1.4.1 (and likely earlier versions before 1.4.2). The issue allows remote attackers to inject arbitrary JavaScript/HTML via the q parameter. The entry notes this...

CVE-2011-4572: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

PT-2011-5000

Name of the Vulnerable Software and Affected Versions CF Image Hosting Script versions 1.3.82 through 1.4.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the q parameter in the inc/tesmodrewite.php file. Recommendations For CF Imag...

Blackhole Exploit Kit attack on WampServer & Wordpress sites

Blackhole Exploit Kit attack on WampServer & Wordpress sites Kimberly from Stopmalvertising found Blackhole Exploit Kit on Website of most popular Webserver software site WAMPSERVER. Almost at the bottom of the webpage they notice a Javascript requesting a file from jquery.googlecode.com. The URL...

Anonymous Hackers Take Down 40 Child Porn Websites

Anonymous Hackers Take Down 40 Child Porn Websites Anonymous has taken down more than 40 darknet-based child porn websites over the last week. Details of some of the hacks have been released via pastebin OpDarknet, including personal details 1500 users of a site named 'Lolita City,' and DDoS tool...

Easy Hosting control panel to manage authentication bypass the defect and repair-vulnerability warning-the black bar safety net

Title: Easy Hosting Control Panel Admin Auth Bypass Author: Jasman www.2cto.com Download address: https://launchpad.net/ehcp & amp; http://www.ehcp.net Affected version: 0.29.10 - 0.29.13 Test platform: Ubuntu, Debian Overview Easy Hosting Control Panel designed for hosting of multiple domains on...