Positive Software vulnerabilities

Products

• H-sphere 8
• Sitestudio 3

Newest

• positive software h-sphere Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere... CVE-2008-4448 6.8 MediumOctober 6, 2008
• positive software h-sphere Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4... CVE-2008-4447 Public exploit 4.3 MediumOctober 6, 2008
• positive software h-sphere, sitestudio +1 more Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in... CVE-2008-1049 10.0 HighFebruary 27, 2008
• positive software sitestudio Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or... CVE-2007-2633 10.0 HighMay 13, 2007
• positive software h-sphere The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's... CVE-2006-6382 6.8 MediumDecember 7, 2006
• positive software h-sphere Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote... CVE-2006-3278 2.6 LowJune 28, 2006
• positive software h-sphere Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in... CVE-2006-0193 4.3 MediumJanuary 13, 2006
• positive software cp\+ Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows... CVE-2005-4261 7.8 HighDecember 15, 2005
• positive software h-sphere winbox H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in... CVE-2005-1606 Public exploit 4.6 MediumMay 16, 2005
• positive software sitestudio Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote... CVE-2005-1605 6.8 MediumMay 16, 2005
• positive software h-sphere H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell... CVE-2003-1248 7.5 HighDecember 31, 2003
• positive software h-sphere Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary... CVE-2003-1247 Public exploit 7.5 HighDecember 31, 2003