Phpbb 2.0.7a And Earlier Secuity Issues

Vendor : phpBB Group URL : http://www.phpbb.com Version : phpBB 2.0.7a && Earlier Risk : Multiple Vulnerabilities Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a user-friendly interface, simple and straight forward...

More Cpanel Vuls (cross site scripting)

Advisory Name: More Cpanel Vuls cross site scripting Discovered by: Fable Greets: 0x29A Crew, !AM Crew, Atomix, d3thstar, mgrd, rootthief.com. Version Tested On: cPanel Build 9.1.0-STABLE 93 Most likely effects more Description cPanel & WebHost Manager WHM is a next generation web hosting control...

phpBB 2.0.7a - Multiple Vulnerabilities

phpBB 2.0.7a - Multiple Vulnerabilities phpBB Multiple Vulnerabilities Vendor: phpBB Group Product: phpBB Version: = 2.0.7a Website: http://www.phpbb.com BID: 9942 Description: phpBB is a high powered, fully scalable, and highly customisable open-source bulletin board package. phpBB has a...

Cpanel Request Lets Authenticated Users Conduct Cross-Site Scripting Attacks

Advisory Name: Cpanel Request Lets Authenticated Users Conduct Cross-Site Scripting Attacks Discovered by: Fable Greets: 0x29A Crew, !AM Crew, Atomix, d3thstar, mgrd, rootthief.com. Versions: ?? Description cPanel & WebHost Manager WHM is a next generation web hosting control panel system. Both...

DSA-396 thttpd - missing input sanitizing, wrong calculation

Bulletin has no description...

cPanel Malicious HTML Tags Injection Vulnerability

------------------------------------------------------------------------------- ----- cPanel Malicious HTML Tags Injection Vulnerability ------------------------------------------------------------------------------- -- Author: Ory Segal, Sanctum inc. http://www.SanctumInc.com -- Discovery Date:...

Web Server Potentially Hosting Copyrighted Material

The remote web server is hosting media mp3, wav, avi, or asf files that might be infringing on the owners' copyright. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11778; scriptversion"$Revision: 1.25 $"; scriptcvsdate"$Date: 2011/03/18 18:07:04 $";...

Hosting Controller Multiple Script Arbitrary Directory Browsing

The Hosting Controller application resides on this server. This version is vulnerable to multiple remote exploits. At attacker may make use of this vulnerability and use it to gain access to confidential data and/or escalate their privileges on the Web server. %NASLMINLEVEL 70300 This script was...

Sphera Hosting Director Control Panel Multiple Vulnerabilities: XSS-Session Hijacking-DoS/Buffer Overflow-Another User Accounts access

-------------------- Product: SPHERA HostingDirector and Final User VDS Control Panel Hosting Control Panel Vendor: SPHERA Versions: VULNERABLE - 3.x - 2.x - 1.x NOT VULNERABLE - ? --------------------- Description: HostingDirector comprises three fundamental components that are integrated to...

H-Sphere 2.x - HTML Template Inclusion Cross-Site Scripting

H-Sphere 2.x - HTML Template Inclusion Cross-Site Scripting source: https://www.securityfocus.com/bid/7855/info H-Sphere is prone to multiple cross-site scripting vulnerabilities via the HTML template feature in the Hosting Control Panel. HTML and script code will not be filtered from pages which...

CVE-2002-1562

Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. dot dot sequences in the Host: header...

CVE-2002-1562

Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. dot dot sequences in the Host: header...

CVE-2002-1562

The CVE-2002-1562 entry affects thttpd in virtual-hosting mode, where a remote attacker can read arbitrary files by injecting a path into the Host header (directory traversal). Related advisories (CAN-2002-1562 and CAN-2003-0899) describe an information leak and remote code execution via a crafte...

CVE-2002-1562: Undefined Security Weakness

Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. dot dot sequences in the Host: header...

Coppermine Photo Gallery 1.0 - PHP Code Injection

Coppermine Photo Gallery 1.0 - PHP Code Injection source: https://www.securityfocus.com/bid/7300/info Coppermine Photo Gallery has been reported prone to PHP code injection attacks. Due to a lack of sufficient sanitization performed on user-supplied filenames that are uploaded into the Photo...

CVE-2002-0776

getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix...

CVE-2002-0464

Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. dot dot in arguments to 1 fileeditor.asp, 2 folderactions.asp, or 3 editoractions.asp...

CVE-2002-0776

CVE-2002-0776 affects Hosting Controller 2002. getuserdesc.asp lets remote attackers change arbitrary users’ passwords and gain privileges by modifying the username parameter. Root cause is input manipulation in the affected function, leading to partial confidentiality, integrity and availability...

CVE-2002-0464

CVE-2002-0464 affects Hosting Controller 1.4.1 and earlier. A directory-traversal vulnerability allows remote attackers to read and modify arbitrary files and directories by supplying a ".." in arguments to the vulnerable endpoints: file_editor.asp, folderactions.asp, or editoractions.asp. The in...

CVE-2002-0776: Undefined Security Weakness

getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix...