Virtual Hosting Control System

Virtual Hosting Control System

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2007-3988

  • EPSS 0.88%
  • Veröffentlicht 25.07.2007 18:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

4.3

CVE-2006-2174

Exploit
  • EPSS 7.64%
  • Veröffentlicht 04.05.2006 12:38:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in admin/server_day_stats.php in Virtual Hosting Control System (VHCS) allow remote attackers to inject arbitrary web script or HTML via the (1) day, (2) month, or (3) year parameter.

4.3

CVE-2006-0683

  • EPSS 0.57%
  • Veröffentlicht 15.02.2006 00:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 with v.1 patch and earlier allows remote attackers to inject arbitrary web script or HTML via the username, which is recorded in a log file but not properly han...

7.5

CVE-2006-0684

  • EPSS 9.14%
  • Veröffentlicht 15.02.2006 00:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the password, which may allow remote attackers to gain unauthorized access.

10

CVE-2006-0685

  • EPSS 9.07%
  • Veröffentlicht 15.02.2006 00:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, which allows remote attackers to gain unauthorized access.

10

CVE-2006-0686

  • EPSS 2.39%
  • Veröffentlicht 15.02.2006 00:02:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access.

4.3

CVE-2005-3902

Exploit
  • EPSS 1.32%
  • Veröffentlicht 29.11.2005 23:03:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in Virtual Hosting Control System (VHCS) 2.2.0 through 2.4.6.2 allows remote attackers to inject arbitrary web script or HTML via query strings that are included in an error message,...

7.5

CVE-2005-1128

  • EPSS 0.43%
  • Veröffentlicht 02.05.2005 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via certain inputs from HTTP POST queries.