Show filters
13 Total Results
Displaying 1-10 of 13
Sort by:
Attacker Value
Unknown
CVE-2022-30777
Disclosure Date: May 16, 2022 (last updated February 23, 2025)
Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.
0
Attacker Value
Unknown
CVE-2012-5004
Disclosure Date: September 19, 2012 (last updated October 05, 2023)
Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote attackers to hijack the authentication of admins for requests that (1) add group plans via admin/group_plans.html or (2) add extra packages via admin/extra_packs/create_extra_pack.html.
0
Attacker Value
Unknown
CVE-2008-6465
Disclosure Date: March 13, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the (1) err, (2) errorcode, and (3) login parameters.
0
Attacker Value
Unknown
CVE-2008-4447
Disclosure Date: October 06, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbitrary web script or HTML via (1) the fn parameter during a dload action, (2) the mask parameter during a search action, and (3) the tab parameter during a sysinfo action.
0
Attacker Value
Unknown
CVE-2008-4448
Disclosure Date: October 06, 2008 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perform unauthorized actions as an administrator, including file deletion and creation, via a link or IMG tag to the (1) overkill, (2) futils, or (3) edit actions.
0
Attacker Value
Unknown
CVE-2008-1049
Disclosure Date: February 27, 2008 (last updated October 04, 2023)
Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11, has unknown impact and attack vectors.
0
Attacker Value
Unknown
CVE-2006-6382
Disclosure Date: December 07, 2006 (last updated October 04, 2023)
The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which allows local users to append log data to arbitrary files via a symlink attack. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2006-3278
Disclosure Date: June 28, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) next_template, (2) start, (3) curr_menu_id, and (4) arid parameters in psoft/servlet/resadmin/psoft.hsphere.CP when using the mailman/massmail.html template_name.
0
Attacker Value
Unknown
CVE-2006-0193
Disclosure Date: January 13, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action.
0
Attacker Value
Unknown
CVE-2005-2487
Disclosure Date: August 07, 2005 (last updated February 22, 2025)
Unknown vulnerability in Sun McData switches and directors 4300, 4500, 6064, and 6140 before E/OS 6.0.0 may allow attackers to cause a denial of service (connectivity and array access loss) via a network broadcast storm.
0
