virtual hosting control system virtual hosting control system vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in Virtual Hosting Control System (VHCS) 2.2.0 up to and including 2.4.6.2 allows remote malicious users to inject arbitrary web script or HTML via query strings that are included in an error message, as demonstr...

Virtual Hosting Control System Virtual Hosting Control System 2.2 Virtual Hosting Control System Virtual Hosting Control System 2.4 Virtual Hosting Control System Virtual Hosting Control System 2.4.6 Virtual Hosting Control System Virtual Hosting Control System 2.4.6.2

1 EDB exploit

Multiple SQL injection vulnerabilities in VHCS 2.4 and previous versions allow remote malicious users to execute arbitrary SQL commands via certain inputs from HTTP POST queries.

Virtual Hosting Control System Virtual Hosting Control System Virtual Hosting Control System Virtual Hosting Control System 2.2

Cross-site scripting (XSS) vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 with v.1 patch and previous versions allows remote malicious users to inject arbitrary web script or HTML via the username, which is recorded in a log file but not properly handled when the ...

Virtual Hosting Control System Virtual Hosting Control System 2.4.7.1 Patch V.1 Virtual Hosting Control System Virtual Hosting Control System

add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and previous versions does not check user privileges when adding a new administrative user, which allows remote malicious users to gain unauthorized access.

Virtual Hosting Control System Virtual Hosting Control System

change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and previous versions does not verify the old password when a user changes the password, which may allow remote malicious users to gain unauthorized access.

Virtual Hosting Control System Virtual Hosting Control System

1 EDB exploit

The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and previous versions does not exit when authentication fails, which allows remote malicious users to gain unauthorized access.

Virtual Hosting Control System Virtual Hosting Control System

1 EDB exploit

Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and previous versions allows remote malicious users to hijack web sessions by setting the PHPSESSID parameter.

Virtual Hosting Control System Virtual Hosting Control System

Multiple cross-site scripting (XSS) vulnerabilities in admin/server_day_stats.php in Virtual Hosting Control System (VHCS) allow remote malicious users to inject arbitrary web script or HTML via the (1) day, (2) month, or (3) year parameter.

Virtual Hosting Control System Virtual Hosting Control System 2.4.7.1

1 EDB exploit

An issue exists in the FUSE filesystem implementation in the Linux kernel prior to 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its inc...

Linux Linux Kernel Debian Debian Linux 9.0 Debian Debian Linux 10.0 Starwindsoftware Starwind Virtual San 8

1 Github repository

Unspecified vulnerability in the domain alias management in Virtual Hosting Control System (VHCS) 2.4.6.2, related to "creating and deleting forwards for domain aliases," allows users to hijack the forwardings of other users.

Vchs Vchs 2.4.6.2

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook