260 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 txtDomainName parameter to domains.asp or 2 SearchText or 3 UserLevel parameters to default.asp...
CVE-2006-1407
Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 txtDomainName parameter to domains.asp or 2 SearchText or 3 UserLevel parameters to default.asp...
CVE-2006-1407
Multiple cross-site scripting XSS vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 txtDomainName parameter to domains.asp or 2 SearchText or 3 UserLevel parameters to default.asp...
CVE-2006-1407
CVE-2006-1407 concerns multiple cross-site scripting (XSS) flaws in Helm Web Hosting Control Panel 3.2.10 and earlier. The affected components are domains.asp (txtDomainName) and default.asp (SearchText, UserLevel) where user-controlled inputs can inject arbitrary script/HTML. The practical impac...
Helm Web Hosting Control Panel XSS vuln.
Helm Web Hosting Control Panel XSS vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:http://www.webhostautomation.com/ affected versions:3.2.10 and prior orginal advisory: http://pridels.blogspot.com/2006/03/helm-web-hosting-control-panel-xss.html Vuln. description: Helm Web Hosting...
[Full-disclosure] Re: cPanel Multiple Cross Site Scripting Vulnerability
One more to ur list http://localhost:2095/dowebmailforward.cgi?fwd=3Cscript3Ealert28document.cookie293B3C2Fscript3E&action=Add+Forwarder Sumit On 2/4/06, Hamish Stanaway [email protected] wrote: Hi there, Thank you for finding this vulnerability in a widely used software. I was wondering i...
cpanelXSS.txt
Title: cPanel Multiple Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk Discovered: 22 january 2005 Published: 02 february 2006 MorX Security Research Team http://www.morx.org Service: Web Hosting Manager Vendor: cPanel Vulnerability: Cross Site Scripting / Cookie-Theft / Relogin attacks...
[Full-disclosure] cPanel Multiple Cross Site Scripting Vulnerability
Title: cPanel Multiple Cross Site Scripting Author: Simo Ben youssef aka 6mOHaCk simoatmorxorg Discovered: 22 january 2005 Published: 02 february 2006 MorX Security Research Team http://www.morx.org Service: Web Hosting Manager Vendor: cPanel Vulnerability: Cross Site Scripting / Cookie-Theft /...
DRZESHMS.txt
Description: http://www.drzes.com/ An all-in-one web hosting management system. A feature-rich, robust, easy-to-use control panel and billing system. A "self-branding" web hosting management system. No DRZES branding. Both the admin and customer can control multiple plans/servers from one...
phpCOIN < 1.2.2 2005-12-13 Fix-File Multiple Vulnerabilities
The remote host appears to be running phpCOIN, a software package for web-hosting resellers to handle clients, orders, helpdesk queries, and the like. The version of phpCOIN installed on the remote host fails to sanitize user-supplied input to the 'CCFGPKGPATHDBSE' parameter of the 'config.php'...
DRZES HMS XSS and SQL Injection Vulnerabilities
Description: http://www.drzes.com/ An all-in-one web hosting management system. A feature-rich, robust, easy-to-use control panel and billing system. A "self-branding" web hosting management system. No DRZES branding. Both the admin and customer can control multiple plans/servers from one...
DRZES HMS 3.2 Multiple vuln.
DRZES HMS 3.2 - Hosting Management System -multiple SQL inj. vuln. and XSS vuln. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/drzes-hms-32-multiple-vuln.html Vendor:http://drzes.com/ affected version:3.2 and prior Product description: Increase...
SoftBiz Web Hosting Directory Script 1.1 - browsecats.php?cid SQL Injection
SoftBiz Web Hosting Directory Script 1.1 - browsecats.php?cid SQL Injection source: https://www.securityfocus.com/bid/15561/info Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplie...
SoftBiz Web Hosting Directory Script 1.1 - review.php?sbres_id SQL Injection
SoftBiz Web Hosting Directory Script 1.1 - review.php?sbresid SQL Injection source: https://www.securityfocus.com/bid/15561/info Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplie...
SoftBiz Web Hosting Directory Script 1.1 - email.php?h_id SQL Injection
SoftBiz Web Hosting Directory Script 1.1 - email.php?hid SQL Injection source: https://www.securityfocus.com/bid/15561/info Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied inp...
Softbiz Web Host Directory Script Multiple vuln.
Softbiz Web Host Directory Script Multiple vuln. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/web-host-directory-script-multiple.html Vendor:www.softbizscripts.com Product link:http://www.softbizscripts.com/web-hosting-directory-script.php...
SoftBiz Web Hosting Directory Script 1.1 - 'browsecats.php?cid' SQL Injection
source: https://www.securityfocus.com/bid/15561/info Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...
SoftBiz Web Hosting Directory Script 1.1 - 'email.php?h_id' SQL Injection
source: https://www.securityfocus.com/bid/15561/info Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...
SoftBiz Web Hosting Directory Script 1.1 - 'search_result.php?cid' SQL Injection
source: https://www.securityfocus.com/bid/15561/info Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...
Free web hosting space BUG-vulnerability warning-the black bar safety net
Today a friend asked me to help her to find a free space, to be honest, these days free stuff too little. Unlike the previous a dime a dozen. Remember last year 1 2. 2 5, I building Qi UNITA network security. For members opened over a period of time the free space. Today think of that site don't...