3181 matches found
CVE-2005-1654: Direct Request
Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set...
[HSC Security Group] MaxWebPortal - Multiple SQL injection/XSS
Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: Maxwebportal 1.3.5 and prior Risk: High MaxWebPortal is probably the most spread ASP based web portal script. I've found multiple XSS and Sql injection that could easily lead to password strealing or porta...
[Full-disclosure] H-Sphere
------------------------------------------------------------ - EXPL-A-2005-007 exploitlabs.com Advisory 036 - ------------------------------------------------------------ - H-Sphere - AFFECTED PRODUCTS ================= H-Sphere Winbox Positive Software Corporation https://www.psoft.net OVERVIEW...
Hosting Controller 0.6.1 - User Registration (2)
Hosting Controller 0.6.1 - User Registration 2 / Hosting Controller include include include include include define PORT1 80 // port of web server define PORT...
Hosting Controller <= 0.6.1 Unauthenticated User Registeration (2nd)
No description provided by source. / Hosting Controller = v6.1 exploit sileHOSTCxpl This exploit utilize two ways for exploiting vulnerability present into Hosting Controller. This exploit create new user with relative passwd and registered your host with mail server into Hosting Controller...
Hosting Controller <= 0.6.1 Unauthenticated User Registeration (2nd)
Exploit for unknown platform in category remote exploits ==================================================================== Hosting Controller include include s...
Hosting Controller 0.6.1 - User Registration (2)
/ Hosting Controller include include include include include define PORT1 80 // port of web server define PORT2 8077 // port of hosting controller void infovo...
[HSC Security Group] ASP Inline Corporate Calendar SQL injection
Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL injection : ASP Inline Corporate Calendar Risk: Medium The Corporate Calendar is a nice asp script to manage a calendar shared by users. It has been downloaded by thousands people, and it is considered...
Hosting Controller <= 0.6.1 Unauthenticated User Registration Exploit
Exploit for unknown platform in category remote exploits ===================================================================== Hosting Controller INPUT type="hidden" name="domaintypecheck" value="SECOND" id="Hidden1...
Hosting Controller 0.6.1 - User Registration (1)
Hosting Controller 0.6.1 - User Registration 1 Domain: Username: INPUT type="hidden" name="htype" value="27" id="htyp...
Hosting Controller unauthenticated user registeration
-= Security Advisory =- Advisory Information Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : unauthenticated user registeration Risk : High! Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.9 Vend...
Hosting Controller 0.6.1 - User Registration (1)
Domain: Username: INPUT type="hidden" name="choice" value="1"...
ModernBill < 4.3.3 Multiple Vulnerabilities
Binary data 2812.prm...
phpCoin.txt
GulfTech Security Research March 28th, 2005 Vendor : COINSoft Technologies Inc. URL : http://www.phpcoin.com/ Version : phpCoin v1.2.1b && Earlier Risk : Multiple Vulnerabilities Description: phpCoin is a free software package originally designed for web-hosting resellers to handle clients, order...
MagicScripts E-Store Kit-2 PayPal Edition - Remote File Inclusion
MagicScripts E-Store Kit-2 PayPal Edition - Remote File Inclusion source: https://www.securityfocus.com/bid/12910/info MagicScripts E-Store Kit-2 PayPal Edition is prone to a remote file include vulnerability. Remote attackers could potentially exploit this issue to include a remote malicious PHP...
Hosting Controller HCDiskQuoteService.csv Direct Request Information Disclosure
The remote host is running Hosting Controller a web hosting management application. The remote version of this software is vulnerable to an information disclosure flaw which may allow an attacker to gather additional data on the remote host. An attacker may download the file...
Hosting Controller Multiple Unauthenticated information disclose
-= Security Advisory =- Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : Multiple Unauthenticated information disclose Risk : Low Vulnerable Versions: All versi...
CVE-2005-0695
The CVE-2005-0695 issue affects Hosting Controller 6.1 Hotfix 1.7 and earlier, where the forgotpassword.asp password recovery flow can let a remote attacker infer the owner's e-mail address by submitting part of a domain in the login ID field. The underlying vulnerability is described as partial ...
CVE-2005-0694
Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv...
CVE-2005-0695
The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...