2905 matches found
Hosting Controller 6.1 Hotfix 3.2 - Access
Hosting Controller 6.1 Hotfix = 3.2 Multi Vuln. SQLInjection, Command Injection ------- KAPDA::59 - Hosting Controller 6.1 Hotfix = 3.2 Vendor: Hosting Controller Vendor URL: www.hostingcontroller.com Solution: Hotfix 3.3 Found Date: 7/1/2006 Release Date: 10/10/2006 Discussion:...
Hosting Controller Multiple Script ForumID Parameter SQL Injection
The installed version of Hosting Controller fails to sanitize input to the 'ForumID' parameter of the 'forum/HCSpecific/EnableForum.asp' script before using it in database queries. An unauthenticated attacker may be able to leverage this issue to manipulate database queries to reveal sensitive...
cpexploit.txt
All cPanel versions which were released before August 23rd are vulnerable to a local root exploit. Exact version numbers are unclear. Doing a "ls -l /usr/local/cpanel/version" is a good way to determine the last time cPanel was updated. This exploit made the news when it was used to circulate an ...
PHP Krazy Image Hosting 0.7a - display.php SQL Injection
PHP Krazy Image Hosting 0.7a - display.php SQL Injection ? /\ | PHP Krazy Image Host Script id Remote SQL Injection Exploit | | Discovered by: Trex | | Solution: http://www.trex-online.net/fixes/display.rar | | Visit: Trex-Online.net / UnderGround.ag | / errorreporting0; echo " PHP Krazy Image...
PHP Krazy Image Hosting 0.7a (display.php) SQL Injection Exploit
No description provided by source. ? /\ | PHP Krazy Image Host Script id Remote SQL Injection Exploit | | Discovered by: Trex | | Solution: http://www.trex-online.net/fixes/display.rar | | Visit: Trex-Online.net / UnderGround.ag | / errorreporting0; echo " PHP Krazy Image Host Script id Remote SQ...
PHP Krazy Image Hosting 0.7a (display.php) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ PHP Krazy Image Hosting 0.7a display.php SQL Injection Exploit ================================================================ ? /\ | PHP Krazy Image Host Script id Remote S...
PHP Krazy Image Hosting 0.7a - 'display.php' SQL Injection
? /\ | PHP Krazy Image Host Script id Remote SQL Injection Exploit | | Discovered by: Trex | | Solution: http://www.trex-online.net/fixes/display.rar | | Visit: Trex-Online.net / UnderGround.ag | / errorreporting0; echo " PHP Krazy Image Host Script id Remote SQL Injection Exploit\n"; echo "...
SolidState 0.4 - Multiple Remote File Inclusions
SolidState 0.4 - Multiple Remote File Inclusions ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:...
PHP 3 5 - Ini_Restore() Safe_mode open_basedir Restriction Bypass
PHP 3 5 - IniRestore Safemode openbasedir Restriction Bypass source: https://www.securityfocus.com/bid/19933/info PHP is prone to a 'safemode' and 'openbasedir' restriction-bypass vulnerability. Successful exploits could allow an attacker to access sensitive information or to write files in...
phpCOIN Multiple Script _CCFG Parameter Remote File Inclusion
The remote host is running phpCOIN, a software package for web-hosting resellers to handle clients, orders, helpdesk queries, and the like. The version of phpCOIN installed on the remote host fails to sanitize input to the 'CCFG' array parameter before using it in several scripts to include PHP...
Technical note: under some conditions, it's possible to steal HTTP credentials using Flash
Technical note: under some conditions, it's possible to steal HTTP credentials using Flash requires IE + some transparent proxies or virtual hosting The method described here is pretty simple. It works though only on HTTP not HTTPS credentials. Also, it works only when the client browses using IE...
[slackware-security] firefox/thunderbird/seamonkey
New Firefox and Thunderbird packages are available for Slackware 10.2 and -current to fix security issues. In addition, a new Seamonkey package is available for Slackware -current to fix similar issues. More details about the issues may be found here:...
Hosting Controller 1.x - error.asp Cross-Site Scripting
Hosting Controller 1.x - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/18933/info Hosting Controller is prone to a cross-site scripting vulnerability because it fails to sanitize input before displaying it to users of the application. An attacker may leverage this issue...
Hosting Controller 1.x - 'error.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/18933/info Hosting Controller is prone to a cross-site scripting vulnerability because it fails to sanitize input before displaying it to users of the application. An attacker may leverage this issue to have arbitrary script code execute in the browser of...
Hosting Controller <= 6.1 Hotfix 3.1 Privilege Escalation Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Hosting Controller function siteaction nact= "/hosting/addreseller.asp?htype=3" window.document.all.frm1.action = window.document.all.siteact.value + nact...
Hosting Controller <= 6.1 Hotfix 3.1 Privilege Escalation Vulnerability
No description provided by source. Title: An attacker can gain reseller privileges and after that can gain admin privileges Version: 6.1 Hotfix = 3.1 Developer url: www.Hostingcontroller.com Solution: Update to Hotfix 3.2 Discover date: 2005,Summer Report date to hc company: Sat Jun 10, 2006...
WonderEdit Pro CMS (template_path) Remote File Include Vulnerabilities
No description provided by source. -------------------------------------------------------------------------------- Title : WonderEdit Pro CMS = Pro version Remote File Include Vulnerabilities Discovered By OLiBekaS -----------------------------------------------------------------------------...
WonderEdit Pro CMS (template_path) - Remote File Inclusion
WonderEdit Pro CMS templatepath - Remote File Inclusion -------------------------------------------------------------------------------- Title : WonderEdit Pro CMS = Pro version Remote File Include Vulnerabilities Discovered By OLiBekaS...
WonderEdit Pro CMS (template_path) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ====================================================================== WonderEdit Pro CMS templatepath Remote File Include Vulnerabilities ======================================================================...
WonderEdit Pro CMS (template_path) - Remote File Inclusion
-------------------------------------------------------------------------------- Title : WonderEdit Pro CMS = Pro version Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- Affected software description :...