2860 matches found
[Full-Disclosure] Kernelpanik Labs Digest 2005-1
Hi and happy new year. This is a email digest with security fails recently published by Kernelpanik Labs http://www.kernelpanik.org Apache suEXEC Bypass -------------------- Small document about how bypass isolating procedures, i.e. suEXEC, in Apache WebServer. English document:...
CVE-2004-1217
CVE-2004-1217 affects Hosting Controller 6.1 Hotfix 1.4 (and possibly other versions). The vulnerability arises in the FilePath parameter passed to Statsbrowse.asp and Generalbrowse.asp, enabling remote attackers to view arbitrary directories on the affected server. Root cause is improper handlin...
CVE-2004-1217
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to 1 Statsbrowse.asp or 2 Generalbrowse.asp...
hostingControl.txt
-= Security Advisory =- Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004 Release Date:...
Hosting Controller
-= Security Advisory =- Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004 Release Date:...
Hosting Controller <= 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability
No description provided by source. Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions : All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004...
Hosting Controller 0.6.1 Hotfix 1.4 - Directory Browsing
Hosting Controller 0.6.1 Hotfix 1.4 - Directory Browsing Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions : All version Tested on: v.6.1 Hotfix 1.4 Vendor...
Hosting Controller <= 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability
Exploit for unknown platform in category remote exploits ======================================================================= Hosting Controller = 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability ======================================================================= Advisory Information...
Hosting Controller 0.6.1 Hotfix 1.4 - Directory Browsing
Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions : All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004 Release Date: : 12/7/2004 Summary...
[Hat-Squad] SQL injection and XSS Vulnerabilities in HELM
Hat-Squad Advisory: SQL injection and XSS Vulnerabilities in HELM November 2, 2004 Product: HELM Web Hosting Control Panel Vendor URL: http://helm.webhostautomation.com Version: HELM 3.1.19 and lower Vulnerability: SQL injection and XSS Release Date: November 2, 2004 Vendor Status: Informed on 28...
[Full-Disclosure] cPanel symlink chmod issue
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Name: cPanel Vendor URL: http://www.cpanel.net Author: Karol Wisek [email protected] Date: September 30, 2004 Issue: cPanel allows logged in users to change permission of any file to 755. Description: cPanel is a next generation web hosting...
Debian DSA-392-1 : webfs - buffer overflows, file and directory exposure
Jens Steube reported two vulnerabilities in webfs, a lightweight HTTP server for static content. CAN-2003-0832 - When virtual hosting is enabled, a remote client could specify '..' as the hostname in a request, allowing retrieval of directory listings or files above the document root. CAN-2003-08...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1694.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1701.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1693.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1692.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1699.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1696.prm...