CVE-2006-2174

Description

References

• secunia.com/advisories/19940 · Vendor Advisory
• securityreason.com/securityalert/832
• aria-security.net/hm/vhcs.txt
• securityfocus.com/archive/1/432711 · Exploit
• securityfocus.com/bid/17790 · Exploit
• vupen.com/english/advisories/2006/1634
• exchange.xforce.ibmcloud.com/vulnerabilities/26209

Weitere Schwachstellen in virtual hosting control system

• CVE-2007-3988MITTEL 6.8Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier allows remote attackers to hijack web sessions b…
• CVE-2006-0686KRITISCH 10.0add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative us…
• CVE-2006-0685KRITISCH 10.0The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, …
• CVE-2006-0684HOCH 7.5change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the pa…
• CVE-2006-0683MITTEL 4.3Cross-site scripting (XSS) vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 with v.1 patch and earlier allows remote attackers…