CVE-2006-2617

Affected products: AlstraSoft Web Host Directory 1.2 (aka HyperStop WebHost Directory 1.2). Root cause: an invalid entry in the Username field on the login page can produce an SQL error that reveals the installation path, potentially due to SQL injection. Impact: partial disclosure of installatio...

Web Host Automation Ltd. Helm 3.2.10 Beta - 'domains.asp?txtDomainName' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17263/info Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

Web Host Automation Ltd. Helm 3.2.10 Beta - 'default.asp' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17263/info Helm is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...

HelmXSS.txt

I.Vulnerability Helm Hosting Control Panel Cross Site Scripting Vulnerability II.Vendor Web Host Automation Ltd. www.webhostautomation.com III.Affected Systems Helm v3.2.8 and probably previous versions. IV.About Helm is a multi-server management and hosting control system for Windows 2000 and 20...

CVE-2005-3817

Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter in searchresult.php, 2 sbresid parameter in review.php, 3 cid parameter in browsecats.php, 4 hid parameter in email.php, and...

CVE-2005-3817

Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter in searchresult.php, 2 sbresid parameter in review.php, 3 cid parameter in browsecats.php, 4 hid parameter in email.php, and...

CVE-2005-3817

CVE-2005-3817 refers to multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier. The flaws allow remote SQL commands via (1) cid in search_result.php, (2) sbres_id in review.php, (3) cid in browsecats.php, (4) h_id in email.php, and (5) an unspecified parameter...

Clientexec 2.x Multiple SQL inj.

Clientexec 2.x Multiple SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/clientexec-2x-multiple-sql-inj.html Vendor:http://www.clientexec.com/ affected version: Tested on 2.3 ,but also newest versions also can have this vuln. Product...

Softbiz Web Host Directory Script Multiple vuln.

Softbiz Web Host Directory Script Multiple vuln. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/web-host-directory-script-multiple.html Vendor:www.softbizscripts.com Product link:http://www.softbizscripts.com/web-hosting-directory-script.php...

CVE-1999-0045

List of arbitrary files on Web host via nph-test-cgi script...

EUVD-1999-0045

List of arbitrary files on Web host via nph-test-cgi script...

CVE-1999-0045

List of arbitrary files on Web host via nph-test-cgi script...

PT-1996-1006 · Apache +1 · Apache Http Server +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows access to a list of arbitrary files on a web host via the nph-test-cgi script. Recommendations: At the moment, there is no information about a newer version that contai...