EUVD-2017-15569

Malware in sbrugna...

Unspecified Vulnerability in Softaculous Virtualizor WHMCS Module

softaculous is a tool that assists customers in quickly installing web programs. A security vulnerability in the WHMCS Reseller module in Softaculous Virtualizor prior to version 2.9.1.0 allows an attacker to take control of other virtual machines managed by Virtualizor by accessing a modified UR...

CVE-2017-6513

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL...

Design/Logic Flaw

The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL...

CVE-2017-6513

Summary: CVE-2017-6513 affects Softaculous Virtualizor’s WHMCS Reseller Module V2 (version 2.0.2) prior to 2.9.1.0. Affected component: WHMCS Reseller Module for Virtualizor. Root cause (as stated): The module does not verify the user correctly, enabling a remote authenticated user to access a mo...

Virtualizor Detection

Binary data 6945.prm...

Virtualizor Detection

Virtualizor, a web-based VPS Virtual Private Server control panel is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69043; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

Virtualizor < 2.3.1 Unspecified SQL Injection

According to its version number, the Virtualizor install hosted on the remote web server is earlier than 2.3.1 and therefore affected by an unspecified SQL injection vulnerability, which could allow an attacker to inject or manipulate SQL queries on the applications database. This could lead to t...

Virtualizor < 2.3.2 PDNS Domain Deletion Security Bypass

According to its version number, the Virtualizor install hosted on the remote web server is earlier than 2.3.2 and therefore affected by a security bypass vulnerability. Due to an unspecified flaw, an attacker may be able to delete arbitrary PDNS domains that their user account does not have acce...

Virtualizor < 2.3.2 PDNS Domain Deletion Security Bypass

Binary data 6947.prm...

Virtualizor < 2.3.1 Unspecified SQL Injection

Binary data 6946.prm...