Free Hosting Manager 1.2/2.0 - Insecure Cookie Handling

Free Hosting Manager = 1.2 & 2.0 Insecure Cookie Handling Vulnerability AUTHOR : Scary-Boys HOME : http://scary-boys.com Founded By : lvlr-Erfan Download : http://www.fhm-script.com/download.php DorKs : "Powered By Free Hosting Manager" DESCRIPTION : the admin panel only checks if the cookie exis...

Authentication flaw

JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the "adm" cookie value to 1...

Remote file inclusion

PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the rd parameter...

CVE-2008-3454

JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the "adm" cookie value to 1...

CVE-2008-3455

PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the rd parameter...

CVE-2008-3455

CVE-2008-3455 is a PHP remote file inclusion vulnerability affecting JnSHosts PHP Hosting Directory 2.0. The flaw allows arbitrary PHP code execution via a URL in the rd parameter of include/admin.php, enabling full compromise of affected systems (as per NVD description). The connected documents ...

CVE-2008-3454

JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the "adm" cookie value to 1...

CVE-2008-3454

CVE-2008-3454 affects JnSHosts PHP Hosting Directory 2.0. The vulnerability allows remote attackers to bypass authentication by setting the adm cookie value to 1, gaining administrative access. Exploitation is possible over a network with low complexity and no authentication required. The documen...

CVE-2008-3455

PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the rd parameter...

CVE-2008-3454: Undefined Security Weakness

JnSHosts PHP Hosting Directory 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the "adm" cookie value to 1...

CVE-2008-3455: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include/admin.php in JnSHosts PHP Hosting Directory 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the rd parameter...

phphostdir-cookie.txt

PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie = "adm=1; path=/"; document.cookie =...

PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability

No description provided by source. PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie =...

JnSHosts PHP Hosting Directory 'admin.php'远程文件包含漏洞

BUGTRAQ ID: 30428 CNCAN ID：CNCAN-2008073110 JnSHosts PHP Hosting Directory是一款基于PHP的论坛程序。 JnSHosts PHP Hosting Directory不正确过滤用户提交的参数，远程攻击者可以利用漏洞以WEB进程权限执行任意PHP代码。 问题是'admin.php'脚本不正确过滤用户提交的WEB参数，指定远程服务器上的任意文件作为包含对象，可导致以WEB进程权限执行任意PHP代码。 JnSHosts PHP Hosting Directory 2.0 目前没有解决方案提供：...

PHP Hosting Directory 2.0 - Insecure Cookie Handling

PHP Hosting Directory 2.0 - Insecure Cookie Handling PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit:...

PHP Hosting Directory 2.0 (admin.php rd) RFI Vulnerability

No description provided by source. Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Found By : RoMaNcYxHaCkEr My Homepage : WwW.4RxH.CoM My Group : RoMaNTiC-TeaM Type Of Exploit : RFI P.O.C. :...

PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================ PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability ================================================================ PHP Hosting Directory 2.0 Insecure Cookie...

PHP Hosting Directory 2.0 - Insecure Cookie Handling

PHP Hosting Directory 2.0 Insecure Cookie Handling Vulnerability Name Of Script : PHP Hosting Directory 2.0 Download From : http://jnshosts.com/download/phphostdirectory.zip Discoverd By :Stack Home : http://v4-team.com --- exploit: javascript:document.cookie = "adm=1; path=/"; document.cookie =...

[slackware-security] fetchmail

New fetchmail packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-2711 Here are the detail...

PHP Hosting Directory 2.0 (admin.php rd) RFI Vulnerability

Exploit for unknown platform in category web applications ========================================================== PHP Hosting Directory 2.0 admin.php rd RFI Vulnerability ========================================================== Name Of Script : PHP Hosting Directory 2.0 Download From :...