| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-14470 | 4.3 |
cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/success.php error_description parameter.
|
05-09-2019 - 02:16 | 04-09-2019 - 20:15 | |
| CVE-2019-15501 | 4.3 |
Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter.
|
28-08-2019 - 18:31 | 26-08-2019 - 14:15 | |
| CVE-2006-1620 | 5.0 |
admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE. It was
|
18-10-2018 - 16:33 | 05-04-2006 - 10:04 | |
| CVE-2006-5629 | 7.5 |
Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in (1) DisableForum.asp and (2) enableForum.asp. NOTE: it was later reported that t
|
17-10-2018 - 21:44 | 31-10-2006 - 22:07 | |
| CVE-2007-6500 | 4.9 |
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete "gateway information" via a request to OpenApi/GatewayVariables.asp.
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6502 | 5.5 |
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain sensitive information via (1) the AdminName and AdminLevel parameters to fp2000/NEWSRVR.asp, which discloses usernames; and (2) certain XML HTTP requests to ho
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6501 | 5.5 |
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp.
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6495 | 6.5 |
inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named (1) db, (2) www, (3) Special, and (4) log at arbitrary locations under the web root via a modified Dirr
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6498 | 7.5 |
Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) email and (2) loginname parameters to Hosting/Addreseller.asp, (3) the sortfield p
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6504 | 5.5 |
Unspecified vulnerability in IIS/iibind.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the headers of arbitrary hosts via an unspecified parameter.
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6494 | 10.0 |
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, followed by a request to AdminSettings/displays.asp with the DecideActio
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6499 | 5.5 |
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninstall the FrontPage extensions of an arbitrary account via a request to fp2002/UNINSTAL.asp with a "host id (IIS) value."
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6496 | 6.8 |
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameters set, when preceded by certain requests to hosting/default.asp and ho
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6497 | 7.5 |
Hosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and email parameters; and (2) allows remote authenticated users to change a
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6503 | 5.5 |
Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to (1) import an arbitrary plan via a request to hosting/importhostingplans.asp; or (2) change an arbitrary plan via a request to
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2010-3131 | 9.3 |
Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows XP allows local users, and possibly remote attackers, to execute arbit
|
10-10-2018 - 20:01 | 26-08-2010 - 18:36 |