positive software h-sphere 2.4.2 rc1 vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the login parameter in a login action.

Positive Software H-sphere 2.4.1 Patch 2 Positive Software H-sphere 2.4.3 Patch 4 Positive Software H-sphere 2.4.3 Patch 1 Positive Software H-sphere 2.4.1 Patch 1 Positive Software H-sphere 2.4.2 Beta 2 Positive Software H-sphere 2.4.1 Positive Software H-sphere 2.4.2 Patch 4 Positive Software H-sphere 2.4.1 Patch 3 Positive Software H-sphere 2.4.1 Patch 4 Positive Software H-sphere 2.4.2 Beta 3 Positive Software H-sphere 2.4.3 Patch 3 Positive Software H-sphere 2.4.2 Rc1 Positive Software H-sphere 2.4.3 Patch 5 Positive Software H-sphere 2.4.3 Patch 7 Positive Software H-sphere 2.4.2 Patch 5 Positive Software H-sphere 2.4.3 Rc2 Positive Software H-sphere 2.4.2 Positive Software H-sphere 2.4.2 Patch 1 Positive Software H-sphere 2.4.3 Positive Software H-sphere 2.4.3 Rc1 Positive Software H-sphere 2.4.1 Patch 5 Positive Software H-sphere 2.4.2 Patch 2

H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges.

Positive Software H-sphere Winbox 2.4.3 Rc1 Positive Software H-sphere Winbox 2.4.2 Patch 4

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook