Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

h-sphere vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2006-0193
Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the login parameter in a login action.
Positive Software H-sphere 2.4.1 Patch 1Positive Software H-sphere 2.4.1 Patch 2Positive Software H-sphere 2.4.1 Patch 3Positive Software H-sphere 2.4.2 Beta 2Positive Software H-sphere 2.4.1Positive Software H-sphere 2.4.2Positive Software H-sphere 2.4.2 Beta 1Positive Software H-sphere 2.4.2 Patch 5Positive Software H-sphere 2.4.2 Rc1Positive Software H-sphere 2.4.3 Patch 3Positive Software H-sphere 2.4.3 Patch 4Positive Software H-sphere 2.4.3 Patch 5Positive Software H-sphere 2.4.1 Patch 6Positive Software H-sphere 2.4.1 Patch 7Positive Software H-sphere 2.4.2 Patch 3Positive Software H-sphere 2.4.2 Patch 4Positive Software H-sphere 2.4.3 Patch 1Positive Software H-sphere 2.4.3 Patch 2Positive Software H-sphere 2.4.3 Rc2Positive Software H-sphere 2.4.2 Beta 3Positive Software H-sphere 2.4.2 Rc2Positive Software H-sphere 2.4.3
2.6
CVSSv2
CVE-2006-3278
Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the (1) next_template, (2) start, (3) curr_menu_id, and (4) arid parameters in psoft/servlet/resadmin/psoft.hsphere.CP ...
Positive Software H-sphere 2.5Positive Software H-sphere 2.5 Patch 1Positive Software H-spherePositive Software H-sphere 2.5 Patch 2Positive Software H-sphere 2.5 Rc 3
4.3
CVSSv2
CVE-2008-6465
Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote malicious users to inject arbitrary web script or HTML via the (1) err, (2) errorcode, and (3) login parameters.
Parallels H-sphere 3.0.0Parallels H-sphere 3.1
4.6
CVSSv2
CVE-2005-1606
H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges.
Positive Software H-sphere Winbox 2.4.2 Patch 4Positive Software H-sphere Winbox 2.4.3 Rc1
6.8
CVSSv2
CVE-2012-5004
Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote malicious users to hijack the authentication of admins for requests that (1) add group plans via admin/group_plans.html or (2) add extra packages via admin/extra_packs/create...
Parallels H-sphere 3.3
4.3
CVSSv2
CVE-2022-30777
Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.
Parallels H-sphere 3.6.2
4.3
CVSSv2
CVE-2008-4447
Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote malicious users to inject arbitrary web script or HTML via (1) the fn parameter during a dload action, (2) the mask parameter during a search action, and (3) the ta...
Positive Software H-sphere 4.3.10
7.5
CVSSv2
CVE-2003-1247
Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote malicious users to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname in flist.
Positive Software H-sphere 2.3 Rc3
6.8
CVSSv2
CVE-2008-4448
Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote malicious users to perform unauthorized actions as an administrator, including file deletion and creation, via a link or IMG tag to the (1) overkill, (2) fut...
Positive Software H-sphere 4.3.10
6.8
CVSSv2
CVE-2006-6382
The control panel for Positive Software H-Sphere prior to 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which allows local users to append log data to arbitrary files via a symlink attack. NOTE: The provenance of this information is unknown; th...
Positive Software H-sphere 2.4.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook