CVE-2022-30777

The CVE-2022-30777 issue affects Parallels H-Sphere 3.6.1713, where a Cross-Site Scripting (XSS) flaw exists in the index_en.php via the 'from' parameter. Exploitation could allow arbitrary script execution in the victim’s browser, potentially leading to session hijacking, defacement, or theft of...

CVE-2008-6465

CVE-2008-6465 affects Parallels H-Sphere 3.0.0 P9 and 3.1 P1. The NUCLEI template documents multiple cross-site scripting (XSS) flaws in login.php within webshell4, allowing an attacker to inject arbitrary script/HTML via the parameters (err, errorcode, login). Potential impact includes theft of ...

CVE-2012-5004

CVE-2012-5004 involves multiple CSRF vulnerabilities in Parallels H-Sphere 3.3 Patch 1. The affected component is the Parallels H-Sphere web interface, with two verified vulnerable admin actions: adding group plans via admin/group_plans.html and adding extra packages via admin/extra_packs/create_...