[Full-disclosure] phpFormGenerator

EXPL-A-2006-004 exploitlabs.com Advisory 049 - - phpFormGenerator - AFFECTED PRODUCTS ================= phpFormGenerator v2.09 http://phpformgen.sourceforge.net/ OVERVIEW ======== phpFormGenerator is an easy-to-use tool to create reliable and efficient web forms in a snap. No programming of any...

Exploit Labs Security Advisory 2006.4

EXPL-A-2006-004 exploitlabs.com Advisory 049 - - phpFormGenerator - AFFECTED PRODUCTS ================= phpFormGenerator v2.09 http://phpformgen.sourceforge.net/ OVERVIEW ======== phpFormGenerator is an easy-to-use tool to create reliable and efficient web forms in a snap. No programming of any...

webboa.txt

There is sql injection WeBBoA Hosting Script Rish=High Exploit: http://SITE/?islem=hostsatinal&id=-1%20%20union%20select%200,1,2,kuladi,4,5,6,7,sifre%20from%20members+where+uyeid=1 Credit: EntriKa...

CVE-2006-3213

SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter to an unspecified script, possibly host/yenihost.asp...

CVE-2006-3213

CVE-2006-3213 affects WeBBoA Hosting 1.1. A SQL injection vulnerability exists in the handling of the id parameter to an unspecified script (potentially host/yeni_host.asp), allowing remote attackers to execute arbitrary SQL commands. The issue arises from improper input handling in the vulnerabl...

CVE-2006-3213

SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter to an unspecified script, possibly host/yenihost.asp...

CVE-2006-3147

Unspecified vulnerability in Hosting Controller before 6.1 aka Hotfix 3.2 allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is...

CVE-2006-3147

Unspecified vulnerability in Hosting Controller before 6.1 aka Hotfix 3.2 allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is...

CVE-2006-3147

Technical details for CVE-2006-3147 are not provided in the connected documents; the initial description is high‑level and does not specify affected versions, vectors, or remediation. Monitor for updates.

WeBBoA Hosting Script SQL Injection

There is sql injection WeBBoA Hosting Script Rish=High Exploit: http://SITE/?islem=hostsatinal&id=-12020union20select200,1,2,kuladi,4,5,6,7,sifre20from20members+where+uyeid=1 Credit: EntriKa...

Hosting Controller <= 6.1 Hotfix 3.1 Authenticated User Privilege Escalation

According to its version number, the installation of Hosting Controller on the remote host enables any authenticated user to gain host admin privileges and view all his resellers and change their passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

WeBBoA Hosting Script Sql Injection

There is sql injection WeBBoA Host Script Rish=High Exploit: http://SITE/?islem=hostsatinal&id=-12020union20select200,1,2,kuladi,4,5,6,7,sifre20from20members+where+uyeid=1 Credit: EntriKa --------------------------------- Yahoo! Groups gets better. Check out the new email design. Plus there’s muc...

FreeBSD : awstats -- arbitrary command execution vulnerability (2df297a2-dc74-11da-a22b-000c6ec775d9)

OS Reviews reports : If the update of the stats via web front-end is allowed, a remote attacker can execute arbitrary code on the server using a specially crafted request involving the migrate parameter. Input starting with a pipe character '|' leads to an insecure call to Perl's open function an...

1asphost.txt

This is an URL Bug on 1ASPHost & DomainDLX Hosting Services Internet Sites : We Can Run Script, META Tag Or HTML Code. JScript Example 1ASP Host : http://www.1asphost.com/MainLogin.aspx?error=alert'HACKED%20!' Example DomainDLX http://www.domaindlx.com/MainLogin.aspx?error=alert'HACKED%20!'...

URL Bug On 1ASPHost and DomainDLX Hosting Services

This is an URL Bug on 1ASPHost & DomainDLX Hosting Services Internet Sites : We Can Run Script, META Tag Or HTML Code. JScript Example 1ASP Host : http://www.1asphost.com/MainLogin.aspx?error=scriptalert'HACKED20!'/script Example DomainDLX...

CVE-2006-2153

Cross-site scripting XSS vulnerability in HTMPASSWD in DirectAdmin Hosting Management allows remote attackers to inject arbitrary web script or HTML via the domain parameter...

CVE-2006-2153

CVE-2006-2153 describes a cross-site scripting (XSS) vulnerability in DirectAdmin Hosting Management, specifically in the HTM_PASSWD component. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the domain parameter. This is the explicit vulnerability described i...

awstats -- arbitrary command execution vulnerability

OS Reviews reports: If the update of the stats via web front-end is allowed, a remote attacker can execute arbitrary code on the server using a specially crafted request involving the migrate parameter. Input starting with a pipe character "|" leads to an insecure call to Perl's open function and...

Virtual Hosting Control System 2.4.7.1 - 'Server_day_stats.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17790/info Virtual Hosting Control System is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

VHCS --- Virtual Hosting Control System Cross Site Scripting

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.u.r.a & R@1D3N & Smok3r ----------------------------------------------------------- Software: VHCS Link: http://www.vhcs.net Attack method: Cross Site...