46 matches found
Hosting Controller 0.6.1 - User Registration (3)
Hosting Controller 0.6.1 - User Registration 3 Username : emailaddress : firstname : milw0rm.com 2005-05-27...
Hosting Controller 0.6.1 - User Registration (3)
Username : emailaddress : firstname : milw0rm.com 2005-05-27...
cPanel 56789 - Resetpass Remote Command Execution
cPanel 56789 - Resetpass Remote Command Execution source: https://www.securityfocus.com/bid/9848/info A potential remote command execution vulnerability has been discovered in the cPanel Application. This issue occurs due to insufficient sanitization of externally supplied data to the script that...
DCP Portal - 5.5 holes
Never use this product if you have turned off magicquotesgpc. And this product won't work anyway if you have turned off registerglobals. All the files in the product, dont check for integrity of variables. You can easily exploit this using some SQL Injection techniques. For example, if you want t...
VBZoom 1.0 - SQL Injection
source: https://www.securityfocus.com/bid/5919/info A SQL injection vulnerability has been discovered in VBZoom v1.01. Due to insufficient sanitization of variables used to construct SQL queries, it is possible to modify the logic of a query, via a malicious request. Exploiting this issue could...
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)
PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 3 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...