TheHostingTool Multiple Security...

- AV AC AU C I A
发布: 2015-11-03
修订: 2025-04-13

TheHostingTool is prone to the following security vulnerabilities: 1. Multiple cross-site scripting vulnerabilities 2. An HTML-injection vulnerability 3. An arbitrary file-upload vulnerability 4. Multiple SQL-injection vulnerabilities An attacker can exploit these issues to execute attacker-supplied HTML or JavaScript code in the context of the affected site, to steal cookie-based authentication credentials, upload arbitrary files and compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. TheHostingTool 1.2.6 is vulnerable; other versions may also be affected.

0%
当前有1条漏洞利用/PoC
当前有0条受影响产品信息