2860 matches found
CVE-2006-3213
SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter to an unspecified script, possibly host/yenihost.asp...
CVE-2006-3147
Unspecified vulnerability in Hosting Controller before 6.1 aka Hotfix 3.2 allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is...
CVE-2006-3147
Technical details for CVE-2006-3147 are not provided in the connected documents; the initial description is high‑level and does not specify affected versions, vectors, or remediation. Monitor for updates.
CVE-2006-3147
Unspecified vulnerability in Hosting Controller before 6.1 aka Hotfix 3.2 allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is...
WeBBoA Hosting Script SQL Injection
There is sql injection WeBBoA Hosting Script Rish=High Exploit: http://SITE/?islem=hostsatinal&id=-12020union20select200,1,2,kuladi,4,5,6,7,sifre20from20members+where+uyeid=1 Credit: EntriKa...
Hosting Controller <= 6.1 Hotfix 3.1 Authenticated User Privilege Escalation
According to its version number, the installation of Hosting Controller on the remote host enables any authenticated user to gain host admin privileges and view all his resellers and change their passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
WeBBoA Hosting Script Sql Injection
There is sql injection WeBBoA Host Script Rish=High Exploit: http://SITE/?islem=hostsatinal&id=-12020union20select200,1,2,kuladi,4,5,6,7,sifre20from20members+where+uyeid=1 Credit: EntriKa --------------------------------- Yahoo! Groups gets better. Check out the new email design. Plus there’s muc...
FreeBSD : awstats -- arbitrary command execution vulnerability (2df297a2-dc74-11da-a22b-000c6ec775d9)
OS Reviews reports : If the update of the stats via web front-end is allowed, a remote attacker can execute arbitrary code on the server using a specially crafted request involving the migrate parameter. Input starting with a pipe character '|' leads to an insecure call to Perl's open function an...
1asphost.txt
This is an URL Bug on 1ASPHost & DomainDLX Hosting Services Internet Sites : We Can Run Script, META Tag Or HTML Code. JScript Example 1ASP Host : http://www.1asphost.com/MainLogin.aspx?error=alert'HACKED%20!' Example DomainDLX http://www.domaindlx.com/MainLogin.aspx?error=alert'HACKED%20!'...
URL Bug On 1ASPHost and DomainDLX Hosting Services
This is an URL Bug on 1ASPHost & DomainDLX Hosting Services Internet Sites : We Can Run Script, META Tag Or HTML Code. JScript Example 1ASP Host : http://www.1asphost.com/MainLogin.aspx?error=scriptalert'HACKED20!'/script Example DomainDLX...
CVE-2006-2153
CVE-2006-2153 describes a cross-site scripting (XSS) vulnerability in DirectAdmin Hosting Management, specifically in the HTM_PASSWD component. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the domain parameter. This is the explicit vulnerability described i...
CVE-2006-2153
Cross-site scripting XSS vulnerability in HTMPASSWD in DirectAdmin Hosting Management allows remote attackers to inject arbitrary web script or HTML via the domain parameter...
awstats -- arbitrary command execution vulnerability
OS Reviews reports: If the update of the stats via web front-end is allowed, a remote attacker can execute arbitrary code on the server using a specially crafted request involving the migrate parameter. Input starting with a pipe character "|" leads to an insecure call to Perl's open function and...
Virtual Hosting Control System 2.4.7.1 - Server_day_stats.php Multiple Cross-Site Scripting Vulnerabilities
Virtual Hosting Control System 2.4.7.1 - Serverdaystats.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17790/info Virtual Hosting Control System is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitiz...
VHCS --- Virtual Hosting Control System Cross Site Scripting
---------------------------------------------------------- Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.u.r.a & R@1D3N & Smok3r ----------------------------------------------------------- Software: VHCS Link: http://www.vhcs.net Attack method: Cross Site...
Virtual Hosting Control System 2.4.7.1 - 'Server_day_stats.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/17790/info Virtual Hosting Control System is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...
DirectAdmin.txt
''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' Aria-Security.net Advisory Discovered by: O.U.T.L.A.W [email protected] Gr33t to:A.u.r.a & R@1D3N & Cl0wn & Dtrap...
XSS Attack On DirectAdmin Hosting Managment
''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' Aria-Security.net Advisory Discovered by: O.U.T.L.A.W [email protected] Gr33t to:A.u.r.a & R@1D3N & Cl0wn & Dtrap...
Fenice Oms 1.10 - GET Remote Buffer Overflow
/ IHS Iran Homeland Security public source code Fenice - Open Media Streaming Server remote BOF exploit author : c0d3r "kaveh razavi" [email protected] package : fenice-1.10.tar.gz and prolly prior versions workaround : update after patch release advisory : https://www.securityfocus.com/bid/17678...