19 matches found
EUVD-2011-3766
Malware in sbrugna...
CVE-2011-3809
TheHostingTool THT 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/pear/Mail/smtp.php and certain other files...
TheHostingTool 多个 SQL 注入漏洞
No description provided by source...
TheHostingTool 任意文件上传漏洞
No description provided by source...
Multiple SQL Injection Vulnerabilities in TheHostingTool
TheHostingTool is a set of open source free PHP-based hosting applications. TheHostingTool suffers from multiple SQL injection vulnerabilities. An attacker could exploit the vulnerabilities to crisis the application, access or modify data, or exploit potential security holes underlying the databa...
Multiple Cross-Site Scripting Vulnerabilities in TheHostingTool
TheHostingTool is a set of open source free PHP-based hosting applications. TheHostingTool suffers from multiple cross-site scripting vulnerabilities. An attacker can exploit the vulnerabilities to steal cookie-based authentication...
TheHostingTool Arbitrary File Upload Vulnerability
TheHostingTool is a set of open source free PHP-based hosting applications. An arbitrary file upload vulnerability exists in TheHostingTool. An attacker can exploit the vulnerability to upload arbitrary files...
TheHostingTool 1.2.6 SQL Injection
Security Advisory - Curesec Research Team 1. Introduction Affected Product: TheHostingTool 1.2.6 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: https://thehostingtool.com/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to vendor: 09/07/2015 Disclosed to public:...
TheHostingTool 1.2.6 Cross Site Scripting
Security Advisory - Curesec Research Team 1. Introduction Affected Product: TheHostingTool 1.2.6 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: https://thehostingtool.com/ Vulnerability Type: XSS Remote Exploitable: Yes Reported to vendor: 09/07/2015 Disclosed to public: 10/07/2015...
TheHostingTool 1.2.6 Code Execution
Security Advisory - Curesec Research Team 1. Introduction Affected Product: TheHostingTool 1.2.6 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: https://thehostingtool.com/ Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 09/07/2015 Disclosed to public:...
TheHostingTool 1.2.2 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: TheHostingTool 1.2.2 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Mon 12 Jul 2010 01:19:52 PM EEST Vendor: http://thehostingtool.com/ Download: http://thehostingtool.googlecode.com/files/THT-v1.2.2.zip --- -= CSRF PoC 1 - Creat...
TheHostingTool 1.2.x Cross Site Scripting
Title : TheHostingTool 1.2.x Multiple Cross Site Scripting Author : DevilScreaM Date : 7 Desember 2013 Category : Web Applications Vendor : http://thehostingtool.com/ Version : 1.2.x Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker ...
CVE-2011-3809
TheHostingTool THT 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/pear/Mail/smtp.php and certain other files...
Information disclosure
TheHostingTool THT 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/pear/Mail/smtp.php and certain other files...
CVE-2011-3809
TheHostingTool THT 1.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/pear/Mail/smtp.php and certain other files...
CVE-2011-3809
The Hosting Tool (THT) version 1.2.3 is affected. A remote attacker can trigger an information-disclosure via a direct request to a PHP file (e.g., includes/pear/Mail/smtp.php) that reveals the installation path in an error message. This CVE (CVE-2011-3809) is documented with a base score of 5.0 ...
TheHostingTool 1.2.2 Cross Site Request Forgery
Date: Mon 12 Jul 2010 01:19:52 PM EEST Vendor: http://thehostingtool.com/ Download: http://thehostingtool.googlecode.com/files/THT-v1.2.2.zip --- -= CSRF PoC 1 - Create Staff Account =- TheHostingTool 1.2.2 Multiple CSRF Vulnerabilities - Create Staff Account -= CSRF PoC 2 - Delete Staff Account ...
TheHostingTool v1.2.2 Multiple CSRF Vulnerabilities
Exploit for php platform in category web applications =================================================== TheHostingTool v1.2.2 Multiple CSRF Vulnerabilities =================================================== Date: Mon 12 Jul 2010 01:19:52 PM EEST Vendor: http://thehostingtool.com/ Download:...
TheHostingTool 1.2.2 - Multiple Cross-Site Request Forgery Vulnerabilities
Date: Mon 12 Jul 2010 01:19:52 PM EEST Vendor: http://thehostingtool.com/ Download: http://thehostingtool.googlecode.com/files/THT-v1.2.2.zip --- -= CSRF PoC 1 - Create Staff Account =- TheHostingTool 1.2.2 Multiple CSRF Vulnerabilities - Create Staff Account -= CSRF PoC 2 - Delete Staff Account ...