EUVD-2005-1448

Malware in sbrugna...

EUVD-2005-1449

Malware in sbrugna...

EUVD-2005-1447

Malware in sbrugna...

EUVD-2005-1450

Malware in sbrugna...

CVE-2005-1445

CVE-2005-1445 affects SitePanel 2.6.1 and earlier (SitePanel2). The issue is multiple directory traversal vulnerabilities allowing remote attackers to (1) delete arbitrary files via the id parameter in a rmattach action to 5.php, and (2) read arbitrary files via the lang parameter to index.php. R...

CVE-2005-1446

SitePanel 2.6.1 and earlier (SitePanel2) are vulnerable to remote file upload: an attacker can attach a file to a trouble ticket and have it executed (e.g., PHP scripts). The entry does not provide specific affected versions beyond 2.6.1 and earlier, nor details on exact vulnerable components, ro...

CVE-2005-1446

SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticket...

CVE-2005-1444

Multiple cross-site scripting XSS vulnerabilities in SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to inject arbitrary web script or HTML via 1 the v, show, or secname parameters to main.php, 2 the inadmin, newsev, or postid parameters to 5.php, or 3 the id parameter to 0.php...

CVE-2005-1445

Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to 1 delete arbitrary files via the id parameter in a rmattach action to 5.php, or 2 read arbitrary files via the lang parameter to index.php...

CVE-2005-1447

PHP remote file inclusion vulnerability in main.php in SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to execute arbitrary PHP code via the p parameter...

CVE-2005-1446

SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticket...

CVE-2005-1445

Multiple directory traversal vulnerabilities in SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to 1 delete arbitrary files via the id parameter in a rmattach action to 5.php, or 2 read arbitrary files via the lang parameter to index.php...

CVE-2005-1447

PHP remote file inclusion vulnerability in main.php in SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to execute arbitrary PHP code via the p parameter...

CVE-2005-1444

Multiple cross-site scripting XSS vulnerabilities in SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to inject arbitrary web script or HTML via 1 the v, show, or secname parameters to main.php, 2 the inadmin, newsev, or postid parameters to 5.php, or 3 the id parameter to 0.php...

CVE-2005-1444

SitePanel 2.6.1 and earlier (SitePanel2) are affected by multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary web script/HTML via: (1) v, show, or sec_name parameters to main.php, (2) inadmin, newsev, or postid parameters to 5.php, or (3) id p...

CVE-2005-1447

The CVE-2005-1447 vulnerability affects SitePanel (SitePanel2) 2.6.1 and earlier. It is a PHP remote file inclusion in main.php that allows an attacker to execute arbitrary PHP code by supplying a crafted value for the p parameter. The vulnerability score (NVD CVSS v2) is notable: AV:N/AC:L/Au:N/...

[SA15213] SitePanel Multiple Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: SitePanel Multiple Vulnerabilities SECUNIA ADVISORY ID...