2860 matches found
Hosting Controller <= 0.6.1 HotFix 2.1 Change Credit Limit Exploit
Exploit for unknown platform in category remote exploits ================================================================== Hosting Controller Soroush Dalili from GSG Username: Description: FullName: AccountDisabled 1,blank: UserChangePassword: PassCheck=TRUE,0: New Password:...
Hosting Controller <= 0.6.1 HotFix 2.1 Change Credit Limit Exploit
No description provided by source. Hi, I'm Soroush Dalili from GSG GrayHatz Security Group. Title: Hosting controller program have a security bug in "AccountActions.asp" that an authenticated user can change his/her credit and buy some services! Version: 6.1 HotFix 2.1 and older Developer url:...
Hosting Controller 0.6.1 HotFix 2.1 - Change Credit Limit
Hosting Controller 0.6.1 HotFix 2.1 - Change Credit Limit Hi, I'm Soroush Dalili from GSG GrayHatz Security Group. Title: Hosting controller program have a security bug in "AccountActions.asp" that an authenticated user can change his/her credit and buy some services! Version: 6.1 HotFix 2.1 and...
Hosting Controller 0.6.1 HotFix 2.1 - Change Credit Limit
Hi, I'm Soroush Dalili from GSG GrayHatz Security Group. Title: Hosting controller program have a security bug in "AccountActions.asp" that an authenticated user can change his/her credit and buy some services! Version: 6.1 HotFix 2.1 and older Developer url: hostingcontroller.com Comment: Hostin...
hostingController.txt
Cross-Site Scripting CSS in Hosting Controller All Version and hot fix it hehe ; [email protected] Ashiyane Security Team SegmentationFault Group iam sun-os hehe :P Greetz to : S4P0 - failed - Xsupr3mo - Status-x - Stealh Greetz to : berhooz - nima - ehsan - Mehrtash and...
CVE-2005-2077
CVE-2005-2077 corresponds to a cross-site scripting (XSS) vulnerability in Hosting Controller’s error.asp, exploitable via the error parameter. The associated connected data confirms the affected product is Hosting Controller, with error.asp being the vulnerable component and the root cause being...
CVE-2005-2077
Cross-site scripting XSS vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrary web script or HTML via the error parameter...
CVE-2005-2077
Cross-site scripting XSS vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrary web script or HTML via the error parameter...
Hosting Controller 6.1 - error.asp Cross-Site Scripting
Hosting Controller 6.1 - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/14080/info Hosting Controller is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'error.asp' script. A...
Hosting Controller 6.1 - 'error.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14080/info Hosting Controller is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'error.asp' script. An attacker may leverage this issue to have arbitrary...
Cross-Site Scripting (CSS) in Hosting Controller All Version and hot fix it hehe ;)
Cross-Site Scripting CSS in Hosting Controller All Version and hot fix it hehe ; [email protected] Ashiyane Security Team SegmentationFault Group iam sun-os hehe :P Greetz to : S4P0 - failed - Xsupr3mo - Status-x - Stealh Greetz to : berhooz - nima - ehsan - Mehrtash and...
CVE-2005-1788
The CVE-2005-1788 entry describes an SQL injection vulnerability in resellerresources.asp within Hosting Controller 6.1 Hotfix 2.0, exploitable via the jresourceid parameter. Remote attackers can execute arbitrary SQL commands through this input. Affected software/component: Hosting Controller 6....
CVE-2005-1788
SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter...
CVE-2005-1788
SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter...
CVE-2005-1784
CVE-2005-1784 affects Hosting Controller 6.1 HotFix 2.0 and earlier. According to connected sources (Red Hat, CVE lists, and Nessus), a remote attacker can steal passwords and gain privileges by submitting a modified emailaddress parameter in the updateprofile action of UserProfile.asp. The under...
CVE-2005-1784
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp...
Hosting Controller 6.1 - User Profile Unauthorized Access
Hosting Controller 6.1 - User Profile Unauthorized Access source: https://www.securityfocus.com/bid/13816/info Hosting Controller is prone to an unauthorized access vulnerability. Reportedly an authenticated user can modify other user's profiles. This issue is due to a failure in the application ...
[SA15540] Hosting Controller "jresourceid" SQL Injection Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Hosting Controller 6.1 - User Profile Unauthorized Access
source: https://www.securityfocus.com/bid/13816/info Hosting Controller is prone to an unauthorized access vulnerability. Reportedly an authenticated user can modify other user's profiles. This issue is due to a failure in the application to perform proper authentication before providing access t...
Hosting Controller < 6.1 Hotfix 2.1 Multiple Vulnerabilities
According to its version number, the version of Hosting Controller on the remote host suffers from multiple vulnerabilities: - An authenticated user can modify another user's profile, even an admin's, recover his/her password, and then gain access to the affected application as that user. - An...