2860 matches found
Hosting Controller 0.6.1 - User Registration (2)
/ Hosting Controller include include include include include define PORT1 80 // port of web server define PORT2 8077 // port of hosting controller void infovo...
[HSC Security Group] ASP Inline Corporate Calendar SQL injection
Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL injection : ASP Inline Corporate Calendar Risk: Medium The Corporate Calendar is a nice asp script to manage a calendar shared by users. It has been downloaded by thousands people, and it is considered...
Hosting Controller 0.6.1 - User Registration (1)
Hosting Controller 0.6.1 - User Registration 1 Domain: Username: INPUT type="hidden" name="htype" value="27" id="htyp...
Hosting Controller unauthenticated user registeration
-= Security Advisory =- Advisory Information Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : unauthenticated user registeration Risk : High! Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.9 Vend...
Hosting Controller <= 0.6.1 Unauthenticated User Registration Exploit
Exploit for unknown platform in category remote exploits ===================================================================== Hosting Controller INPUT type="hidden" name="domaintypecheck" value="SECOND" id="Hidden1...
Hosting Controller 0.6.1 - User Registration (1)
Domain: Username: INPUT type="hidden" name="choice" value="1"...
ModernBill < 4.3.3 Multiple Vulnerabilities
Binary data 2812.prm...
phpCoin.txt
GulfTech Security Research March 28th, 2005 Vendor : COINSoft Technologies Inc. URL : http://www.phpcoin.com/ Version : phpCoin v1.2.1b && Earlier Risk : Multiple Vulnerabilities Description: phpCoin is a free software package originally designed for web-hosting resellers to handle clients, order...
MagicScripts E-Store Kit-2 PayPal Edition - Remote File Inclusion
MagicScripts E-Store Kit-2 PayPal Edition - Remote File Inclusion source: https://www.securityfocus.com/bid/12910/info MagicScripts E-Store Kit-2 PayPal Edition is prone to a remote file include vulnerability. Remote attackers could potentially exploit this issue to include a remote malicious PHP...
Hosting Controller HCDiskQuoteService.csv Direct Request Information Disclosure
The remote host is running Hosting Controller a web hosting management application. The remote version of this software is vulnerable to an information disclosure flaw which may allow an attacker to gather additional data on the remote host. An attacker may download the file...
Hosting Controller Multiple Unauthenticated information disclose
-= Security Advisory =- Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : Multiple Unauthenticated information disclose Risk : Low Vulnerable Versions: All versi...
CVE-2005-0695
The CVE-2005-0695 issue affects Hosting Controller 6.1 Hotfix 1.7 and earlier, where the forgotpassword.asp password recovery flow can let a remote attacker infer the owner's e-mail address by submitting part of a domain in the login ID field. The underlying vulnerability is described as partial ...
CVE-2005-0694
Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv...
CVE-2005-0695
The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...
CVE-2005-0694
Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv...
CVE-2005-0695
The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...
Hosting Controller 1.x6.1 - Multiple Information Disclosure Vulnerabilities
Hosting Controller 1.x6.1 - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/12748/info Hosting Controller is reported prone to multiple information disclosure vulnerabilities. These issues can allow an attacker to disclose sensitive information, which may...
Hosting Controller 1.x/6.1 - Multiple Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/12748/info Hosting Controller is reported prone to multiple information disclosure vulnerabilities. These issues can allow an attacker to disclose sensitive information, which may be used to carry out further attacks against a computer. An attacker can...
[Full-Disclosure] Kayako eSupport v2.3.1 Support Tracker XSS Vulnerability
http://www.google.com/search?q=22Powered+By+kayako+eSupport22+22search+the+entire+knowledgebase22 1290 customers according to Google. http://support.kayako.com/index.php?a=knowledgebase&j=questiondetails&i=2&nav=XSS&nav2=General20eSupport20Q&A Vendor notified by their access log files and this...
CVE-2004-1217
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to 1 Statsbrowse.asp or 2 Generalbrowse.asp...