CVE-2012-0975

Cross-site scripting XSS vulnerability in misc.php in Image Hosting Script DPI 1.0, 1.3, and earlier allows remote attackers to inject arbitrary web script or HTML via the showseries parameter...

CVE-2012-0975

CVE-2012-0975 is a Cross-site scripting (XSS) vulnerability in the misc.php file of Image Hosting Script DPI versions 1.0, 1.3, and earlier. The vulnerability can be triggered via the showseries parameter, enabling injection of arbitrary web script or HTML. The available sources do not provide ex...

mathopd -- directory traversal vulnerability

Michiel Boland reports: The software has a vulnerability that could lead to directory traversal if the '' construct for mass virtual hosting is used...

DreamHost Warns of Attack, Forces Customer Password Changes

Attackers were able to compromise a database at DreamHost, a large hosting provider, late last week and the company is forcing all of its customers to change their passwords for their FTP and shell accounts as a precautionary measure. DreamHost did not provide many details about what happened in...

Advanced Image Hosting Script - SQL Injection

Exploit Title: AIHS Advanced Image Hosting Script SQL Injection Vulnerability Author: Robert Cooper Robert.Cooper at areyousecure.net Software Link: http://yabsoft.com/ Tested on: Linux/Windows 7 Vulnerable File: viewcomments.php Vulnerable parameter: viewcomments.php?gal=gallery id PoC:...

Free Image Hosting Shell Upload

============================================ Free Image Hosting Script Remote File Upload Vulnerability ============================================ Exploit Title: Free Image Hosting Script ALL VERSIONS Remote File Upload Vulnerability Date: 26/12/11 Author: ySecurity Vendor or Software Link:...

Whois Cart Billing Cross Site Scripting / Disclosure

Title: ====== Whois Cart Billing - Multiple Web Vulnerabilities Date: ===== 2011-12-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=343 VL-ID: ===== 343 Introduction: ============= Whois.Cart is a client/administrator tool that facilitates the many tasks involved in...

Breach confirmed in GlobalSign, SSL certificates not compromised

Breach confirmed in GlobalSign, SSL certificates not compromised GlobalSign said on Tuesday that the SSL certificate and key for www.globalsign.com may have been exposed after a hack on an external server in September. However, the company said that after investigating the breach it has found no...

whmcs hosting management system 0day and fix-vulnerability warning-the black bar safety net

First register an id Submitted a ticket as follows...

WebIndia Hosting Cross Site Scripting / SQL Injection

Exploit Title: WebIndia Hosting Multiple Vulnerability Date: 06.12.2011 - 17:55 Author: 3spi0n Software Website: http://www.newindiahosting.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Dorks: "Powered by New India Hosting" Vulnerable File : | buy.php | $ Demo Sites:...

CVE-2011-4572

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

CVE-2011-4572

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

CVE-2011-4572

CVE-2011-4572: A cross-site scripting (XSS) vulnerability exists in inc/tesmodrewite.php of CF Image Hosting Script versions 1.3.82 and 1.4.1 (and likely earlier versions before 1.4.2). The issue allows remote attackers to inject arbitrary JavaScript/HTML via the q parameter. The entry notes this...

Blackhole Exploit Kit attack on WampServer & Wordpress sites

Blackhole Exploit Kit attack on WampServer & Wordpress sites Kimberly from Stopmalvertising found Blackhole Exploit Kit on Website of most popular Webserver software site WAMPSERVER. Almost at the bottom of the webpage they notice a Javascript requesting a file from jquery.googlecode.com. The URL...

Anonymous Hackers Take Down 40 Child Porn Websites

Anonymous Hackers Take Down 40 Child Porn Websites Anonymous has taken down more than 40 darknet-based child porn websites over the last week. Details of some of the hacks have been released via pastebin OpDarknet, including personal details 1500 users of a site named 'Lolita City,' and DDoS tool...

Easy Hosting control panel to manage authentication bypass the defect and repair-vulnerability warning-the black bar safety net

Title: Easy Hosting Control Panel Admin Auth Bypass Author: Jasman www.2cto.com Download address: https://launchpad.net/ehcp & amp; http://www.ehcp.net Affected version: 0.29.10 - 0.29.13 Test platform: Ubuntu, Debian Overview Easy Hosting Control Panel designed for hosting of multiple domains on...

Easy Hosting Control Panel FTP Account Security Bypass Vulnerability

Easy Hosting Control Panel is prone to a security-bypass vulnerability. Attackers could exploit the issue to add arbitrary FTP accounts to the affected application. Easy Hosting Control Panel versions 0.29.10 up to and including 0.29.13 are vulnerable. OpenVAS Vulnerability Test $Id:...

Easy Hosting Control Panel - Admin Authentication Bypass

Easy Hosting Control Panel - Admin Authentication Bypass Exploit Title: Easy Hosting Control Panel Admin Auth Bypass Google Dork: inurl:/ehcp/?op=applyfordomainaccount Date: 10/04/2011 Author: Jasman Software Link: https://launchpad.net/ehcp & http://www.ehcp.net Version: 0.29.10 - 0.29.13 Tested...

Easy Hosting Control Panel Authentication Bypass

Exploit Title: Easy Hosting Control Panel Admin Auth Bypass Google Dork: inurl:/ehcp/?op=applyfordomainaccount Date: 10/04/2011 Author: Jasman Software Link: https://launchpad.net/ehcp & http://www.ehcp.net Version: 0.29.10 - 0.29.13 Tested on: Ubuntu, Debian + Description Easy Hosting Control...

Easy Hosting Control Panel - Admin Authentication Bypass

Exploit Title: Easy Hosting Control Panel Admin Auth Bypass Google Dork: inurl:/ehcp/?op=applyfordomainaccount Date: 10/04/2011 Author: Jasman Software Link: https://launchpad.net/ehcp & http://www.ehcp.net Version: 0.29.10 - 0.29.13 Tested on: Ubuntu, Debian + Description Easy Hosting Control...