Browse CVEs

MEDIUM 6.8 CVE-2008-4448 Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perform unaut… H Sphere No fix yet Fix from $1,6002008-10-06 HIGH 10.0 CVE-2008-1049 Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 befor… H Sphere after 3.0_patch_8 Fix from $1,9502008-02-27 HIGH 10.0 CVE-2007-2633 Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. … Sitestudio Patch available Fix from $1,9502007-05-13 MEDIUM 6.8 CVE-2006-6382 The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which allows loc… H Sphere Patch available Fix from $1,6002006-12-07 HIGH 7.8 CVE-2005-4261 Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown impact and attack vectors, rela… Cp\+ Patch available Fix from $1,9502005-12-15 MEDIUM 6.8 CVE-2005-1605 Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the n… Sitestudio Patch available Fix from $1,6002005-05-16 HIGH 7.5 CVE-2003-1247EPSS 10% Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile,… H Sphere Patch available Fix from $1,9502003-12-31 HIGH 7.5 CVE-2003-1248 H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile parameters in a … H Sphere Patch available Fix from $1,9502003-12-31