CVE-2006-0686

adduser.php in Virtual Hosting Control System VHCS 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access...

CVE-2006-0683

Cross-site scripting XSS vulnerability in Virtual Hosting Control System VHCS 2.4.7.1 with v.1 patch and earlier allows remote attackers to inject arbitrary web script or HTML via the username, which is recorded in a log file but not properly handled when the administrator uses the admin log...

CVE-2006-0685

The CVE-2006-0685 issue affects VHCS (Virtual Hosting Control System) up to version 2.4.7.1, where the check_login function in login.php does not exit on failed authentication. This enables a remote attacker to bypass authentication and gain unauthorized access to VHCS application scripts. The co...

CVE-2006-0684

CVE-2006-0684 affects Virtual Hosting Control System (VHCS) and is triggered by the change_password.php flow in VHCS 2.4.7.1 and earlier, where the system does not verify the old password when a user changes their password. This behavioral flaw can allow remote attackers to gain unauthorized acce...

CVE-2006-0685

The checklogin function in login.php in Virtual Hosting Control System VHCS 2.4.7.1 and earlier does not exit when authentication fails, which allows remote attackers to gain unauthorized access...

CVE-2006-0686

CVE-2006-0686 concerns VHCS (Virtual Hosting Control System) versions 2.4.7.1 and earlier. The vulnerability lies in add_user.php, which does not check privileges when creating a new administrative user, enabling a remote attacker to gain unauthorized access. Documents confirm the affected produc...

CVE-2006-0684

changepassword.php in Virtual Hosting Control System VHCS 2.4.7.1 and earlier does not verify the old password when a user changes the password, which may allow remote attackers to gain unauthorized access...

CVE-2006-0683

The vulnerability CVE-2006-0683 affects Virtual Hosting Control System (VHCS) 2.4.7.1 with patch v.1 and earlier, allowing remote attackers to inject arbitrary script/HTML via the username stored in a log file; the log is read by the administrator’s log utility, which does not properly handle the...

Virtual Hosting Control System 2.22.4 - login.php?check_login() Authentication Bypass

Virtual Hosting Control System 2.22.4 - login.php?checklogin Authentication Bypass source: https://www.securityfocus.com/bid/16600/info Virtual Hosting Control System VHCS is prone to multiple input and access vulnerabilities. VHCS is prone to an HTML-injection vulnerability and an...

[VulnWatch] RS-2006-1: Multiple flaws in VHCS 2.x

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =============================== - RS-Labs Security Advisory - =============================== Tittle: Multiple flaws in VHCS 2.x ID: RS-2006-1 Severity: Critical Date: 11.Feb.2006 Author: Roman Medina-Heigl Hernandez a.k.a. RoMaNSoFt [email protected]...

Virtual Hosting Control System 2.22.4 - change_password.php Current Password

Virtual Hosting Control System 2.22.4 - changepassword.php Current Password source: https://www.securityfocus.com/bid/16600/info Virtual Hosting Control System VHCS is prone to multiple input and access vulnerabilities. VHCS is prone to an HTML-injection vulnerability and an authentication-bypass...

Virtual Hosting Control System 2.2/2.4 - 'login.php?check_login()' Authentication Bypass

source: https://www.securityfocus.com/bid/16600/info Virtual Hosting Control System VHCS is prone to multiple input and access vulnerabilities. VHCS is prone to an HTML-injection vulnerability and an authentication-bypass vulnerability. These issues could be exploited to gain administrative acces...

CVE-2005-3913

Unspecified vulnerability in the domain alias management in Virtual Hosting Control System VHCS 2.4.6.2, related to "creating and deleting forwards for domain aliases," allows users to hijack the forwardings of other users...

CVE-2005-3913

Unspecified vulnerability in the domain alias management in Virtual Hosting Control System VHCS 2.4.6.2, related to "creating and deleting forwards for domain aliases," allows users to hijack the forwardings of other users...

CVE-2005-3913

The CVE-2005-3913 entry concerns VHCS (Virtual Hosting Control System) 2.4.6.2. The vulnerability affects the domain alias management feature, specifically the creation and deletion of forwards for domain aliases, which enables a user to hijack the forwardings of other users. The provided sources...

VHCSXSS.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SA0006 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++ VHCS 2.x HTTP Error Cross Site Scripting +++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PUBLISHED ON Nov 22, 2005 PUBLISHED AT...

CVE-2005-3902

Cross-site scripting XSS vulnerability in gui/errordocs/index.php in Virtual Hosting Control System VHCS 2.2.0 through 2.4.6.2 allows remote attackers to inject arbitrary web script or HTML via query strings that are included in an error message, as demonstrated using a parameter containing scrip...

CVE-2005-3902

VHCS (Virtual Hosting Control System) versions 2.2.0 through 2.4.6.2 are affected by a cross-site scripting (XSS) vulnerability in gui/errordocs/index.php. Attackers can inject arbitrary script or HTML via query strings that are reflected in an error message. The advisory entries (NVD CVE-2005-39...

CVE-2005-3902

Cross-site scripting XSS vulnerability in gui/errordocs/index.php in Virtual Hosting Control System VHCS 2.2.0 through 2.4.6.2 allows remote attackers to inject arbitrary web script or HTML via query strings that are included in an error message, as demonstrated using a parameter containing scrip...

VHCS 2.x HTTP Error Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SA0006 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++ VHCS 2.x HTTP Error Cross Site Scripting +++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PUBLISHED ON Nov 22, 2005 PUBLISHED AT...