EUVD-2005-1608

Malware in sbrugna...

EUVD-2008-1060

Malware in sbrugna...

EUVD-2007-2626

Malware in sbrugna...

H-Sphere SiteStudio未明漏洞

BUGTRAQ ID: 28002 CNCAN ID:CNCAN-2008022801 H-Sphere SiteStudio是一款自助建站系统。 H-Sphere SiteStudio存在未明安全问题，远程攻击者可以利用漏洞入侵应用程序。 目前没有详细漏洞细节提供。 Parallels SiteStudio 1.7.1 Parallels SiteStudio 1.7 Parallels H-Sphere 3.0 Patch 8 Parallels H-Sphere 2.5 Patch 10 可参考如下补丁：...

Design/Logic Flaw

Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors...

CVE-2008-1049

Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors...

CVE-2008-1049

Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors...

CVE-2008-1049

Technical details about CVE-2008-1049 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins to learn affected products, impact, and remediation once disclosed.

Directory traversal

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. dot dot in the template parameter...

CVE-2007-2633

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. dot dot in the template parameter...

CVE-2007-2633

CVE-2007-2633 affects H-Sphere SiteStudio 1.6. The vulnerability is a directory traversal that allows remote attackers to read, or include and execute, arbitrary local files via a .. (dot dot) in the template parameter. The NVD entry assigns a base score of 10.0 (HIGH) with network attack vector,...

CVE-2007-2633

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. dot dot in the template parameter...

CVE-2005-1605

The entry CVE-2005-1605 describes a Cross-site Scripting (XSS) vulnerability in the guestbook of SiteStudio 1.6, exploitable via the name field to either psoft.guestbook.GuestBookServ (Standalone Site Studio) or E-Guest_sign.pl (Integrated Site Studio with H-Sphere). The vulnerability is triggere...

CVE-2005-1605

Cross-site scripting XSS vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to 1 psoft.guestbook.GuestBookServ in Standalone Site Studio or 2 E-Guestsign.pl in Integrated Site Studio with H-Sphere...

CVE-2005-1605

Cross-site scripting XSS vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to 1 psoft.guestbook.GuestBookServ in Standalone Site Studio or 2 E-Guestsign.pl in Integrated Site Studio with H-Sphere...

[Full-disclosure] SiteStudio

------------------------------------------------------------ - EXPL-A-2005-008 exploitlabs.com Advisory 037 - ------------------------------------------------------------ - Site Studio - AFFECTED PRODUCTS ================= Site Studio Positive Software Corporation https://www.psoft.net OVERVIEW...