EUVD-2005-1879

Malware in sbrugna...

CVE-2005-1932

Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical variables and 1 modify DNS settings for arbitrary domains via the domain parameter to diagnose.php, 2 close, open, or respond to arbitrary support tickets via the close, open, or...

CVE-2005-1932

CVE-2005-1932 affects Lpanel 1.59 and earlier, and other versions before 1.597. The issue allows remote authenticated users to modify certain critical variables via parameter manipulation across multiple pages: diagnose.php (modify DNS settings for arbitrary domains), view_ticket.php (close/open/...

CVE-2005-1932

Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical variables and 1 modify DNS settings for arbitrary domains via the domain parameter to diagnose.php, 2 close, open, or respond to arbitrary support tickets via the close, open, or...

lpanelClient.txt

Subject: Lpanel.NET's Lpanel all versions up to and including 1.59 is vulnerable to the unauthorized viewing of client invoice information. Severity: High; This vulnerability allows an attacker unauthorized viewing of other clients' invoice information. Preamble: Taken from http://www.lpanel.net/...

CVE-2005-1877

The CVE-2005-1877 entry describes a Cross-site scripting (XSS) vulnerability in view_ticket.php for Lpanel version 1.59 and earlier. The pid parameter is the trigger, allowing remote attackers to inject arbitrary web script or HTML and potentially access sensitive information. The provided refere...

CVE-2005-1877

Cross-site scripting XSS vulnerability in viewticket.php in Lpanel 1.59 and earlier allows remote attackers to inject arbitrary web script or HTML and obtain sensitive information via the pid parameter...

[SA15589] Lpanel Multiple Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-1877

Cross-site scripting XSS vulnerability in viewticket.php in Lpanel 1.59 and earlier allows remote attackers to inject arbitrary web script or HTML and obtain sensitive information via the pid parameter...