XSS and CSRF vulnerability on Cpanel 11

DESCRIPTION OF THE SOFTWARE cPanel is a hosting automation tool. WHM interface provides access to the heart of the cPanel and WHM package and allows a Server Administrator to simply configure a few options and be on their way to hosting web sites. 2. DESCRIPTION OF THE VULNERABILITY There are...

cpanel-xssxsrf.txt

DESCRIPTION OF THE SOFTWARE cPanel is a hosting automation tool. WHM interface provides access to the heart of the cPanel and WHM package and allows a Server Administrator to simply configure a few options and be on their way to hosting web sites. 2. DESCRIPTION OF THE VULNERABILITY There are...

CVE-2008-2083

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Sql injection

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2008-2083

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

CVE-2008-2083

SQL injection in Prozilla Hosting Index directory.php when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the cat_id parameter in a list action. Affected component: directory.php of Prozilla Hosting Index. Root cause: input unsanitization/SQL construction exp...

CVE-2008-2083: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Prozilla Hosting Index, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action...

Softbiz Web Host Directory Script (host_id) SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV89$2008 ----------------------------------------------------------------------------------------- ECHOADV89$2008 Softbiz Web Host Directory Script searchresult.php hostid...

[ECHO_ADV_88$2008] Prozilla Hosting Index (directory.php cat_id) Blind Sql Injection Vulnerability

ECHOADV88$2008 ----------------------------------------------------------------------------------------- ECHOADV88$2008 Prozilla Hosting Index directory.php catid Blind Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author :...

Prozilla Hosting Index (directory.php cat_id) SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV88$2008 ----------------------------------------------------------------------------------------- ECHOADV88$2008 Prozilla Hosting Index directory.php catid Blind Sql...

adv88-K-159-2008.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV88$2008 ----------------------------------------------------------------------------------------- ECHOADV88$2008 Prozilla Hosting Index directory.php catid Blind Sql Injection Vulnerability...

adv89-K-159-2008.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV89$2008 ----------------------------------------------------------------------------------------- ECHOADV89$2008 Softbiz Web Host Directory Script searchresult.php hostid Blind Sql Injection Vulnerability...

Prozilla Hosting Index - cat_id SQL Injection

Prozilla Hosting Index - catid SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV88$2008 ----------------------------------------------------------------------------------------- ECHOADV88$2008 Prozilla Hosting Index directory.php catid Blind...

Softbiz Web Host Directory Script (host_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Softbiz Web Host Directory Script hostid SQL Injection Vulnerability ======================================================================= \ /\ \ / | \ \ | / \ // /...

Prozilla Hosting Index (directory.php cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================================= Prozilla Hosting Index directory.php catid SQL Injection Vulnerability ========================================================================= \ /\ \ / | \ \ | / ...

Prozilla Hosting Index - 'cat_id' SQL Injection

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV88$2008 ----------------------------------------------------------------------------------------- ECHOADV88$2008 Prozilla Hosting Index directory.php catid Blind Sql Injection Vulnerability...

Softbiz Web Host Directory Script - 'host_id' SQL Injection

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV89$2008 ----------------------------------------------------------------------------------------- ECHOADV89$2008 Softbiz Web Host Directory Script searchresult.php hostid Blind Sql Injection Vulnerability...

[slackware-security] m4

New m4 packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix security issues. More details about the issues may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1687...

Hosting Controller hosting/addreseller.asp reseller Parameter Authentication Bypass

The version of Hosting Controller installed on the remote host allows a remote attacker to bypass authentication and gain access to an arbitrary user's control panel, including as an administrator. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Unfixed XSS vulnerability at www.dubai-hosting.com

Security researcher TreX, has submitted on 22/02/2008 a cross-site-scripting XSS vulnerability affecting www.dubai-hosting.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is currently...