[Aria-Security.Net] Web Hosting Control Panel - cPanel 11 Multiple Cross-Site Scripting Vulnerabilites

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=57 ----------------------------------------------------------- Software: CPanel Tested On CPanel 11 Beta at cpanel.net Poc:...

CVE-2006-5984

Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 allow remote authenticated users to inject arbitrary web script or HTML via the 1 txtCompanyName, 2 txtEmail, or 3 txtUserAccNum parameter to a users.asp, or the 4 setThemeColour parameter to b default.asp ...

CVE-2006-5984

Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 allow remote authenticated users to inject arbitrary web script or HTML via the 1 txtCompanyName, 2 txtEmail, or 3 txtUserAccNum parameter to a users.asp, or the 4 setThemeColour parameter to b default.asp ...

CVE-2006-5984

Helm Web Hosting Control Panel 3.2.10 is affected by CVE-2006-5984: multiple XSS weaknesses in the Admin, Reseller, and User levels. The vectors include user input in (1) txtCompanyName, (2) txtEmail, (3) txtUserAccNum to users.asp; (4) setThemeColour to default.asp (Reseller/Admin) and (5) setTh...

CVE-2006-5762

PHP remote file inclusion vulnerability in forgotpass.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting...

CVE-2006-5763

Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter to 1 login.php, 2 register.php, or 3 send.php. NOTE: the original provenan...

CVE-2006-5764

PHP remote file inclusion vulnerability in contact.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2006-5763

This CVE covers PHP remote file inclusion in Free File Hosting 1.1 (and possibly earlier) where enabling register_globals allows an attacker to pass a URL in the AD_BODY_TEMP parameter to login.php, register.php, or send.php to execute arbitrary PHP code. The issue also notes that Vector 1 affect...

CVE-2006-5764

The CVE-2006-5764 entry concerns Free File Hosting (version 1.1 and earlier). The vulnerability is a PHP remote file inclusion in contact.php that allows an attacker to execute arbitrary PHP code by supplying a URL in the AD_BODY_TEMP parameter. The risk is described as affecting remote code exec...

CVE-2006-5762

CVE-2006-5762 describes a PHP remote file inclusion in forgot_pass.php (Free File Hosting 1.1 and earlier; also affects related Free File Hosting/Free Image Hosting components) where an attacker can supply a URL in the AD_BODY_TEMP parameter to execute arbitrary PHP code. The underlying issue is ...

CVE-2006-5762

PHP remote file inclusion vulnerability in forgotpass.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting...

CVE-2006-5763

Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter to 1 login.php, 2 register.php, or 3 send.php. NOTE: the original provenan...

CVE-2006-5764

PHP remote file inclusion vulnerability in contact.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2006-5670

PHP remote file inclusion vulnerability in forgotpass.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter...

CVE-2006-5671

PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2006-5670

CVE-2006-5670 is a PHP-based remote file inclusion vulnerability in the free image hosting package (Free Image Hosting 1.0 and earlier). It allows an attacker to remotely execute arbitrary PHP code by supplying a crafted URL in the AD_BODY_TEMP parameter to forgot_pass.php. The vulnerability desc...

CVE-2006-5670

PHP remote file inclusion vulnerability in forgotpass.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter...

CVE-2006-5671

CVE-2006-5671 is a PHP remote file inclusion vulnerability affecting Free Image Hosting 1.0 and earlier. The issue is triggered via the AD_BODY_TEMP parameter in contact.php, allowing an attacker to supply a URL that leads to remote PHP code execution. The vulnerability is classified with a high ...

[SA22607] Hosting Controller Multiple Vulnerabilities

TITLE: Hosting Controller Multiple Vulnerabilities SECUNIA ADVISORY ID: SA22607 VERIFY ADVISORY: http://secunia.com/advisories/22607/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: Hosting Controller 6.x http://secunia.com/product/4754/...

CVE-2006-5629

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in 1 DisableForum.asp and 2 enableForum.asp. NOTE: it was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and...