Positive Software

12 CVEs across 4 Positive Software products. Browse Positive Software vulnerabilities, severities, and proof-of-concept exploits.

Positive Software products with known CVEs

ProductCVEs
H-Sphere8
Sitestudio3
Cp\+1
H-Sphere Winbox1
Positive Software CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-44482008-10-06Cross-site request forgery (CSRF) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to perform unauthorized ac…
CVE-2008-44472008-10-06Cross-site scripting (XSS) vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbitrary web script or…
CVE-2008-10492008-02-27Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and 2.5 before Patch 11…
CVE-2007-26332007-05-13Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. (dot dot)…
CVE-2006-63822006-12-07The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure permissions, which allows local users t…
CVE-2006-32782006-06-28Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) next_t…
CVE-2006-01932006-01-13Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote…
CVE-2005-42612005-12-15Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown impact and attack vectors, related to "a…
CVE-2005-16062005-05-16H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local use…
CVE-2005-16052005-05-16Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field…
CVE-2003-12482003-12-31H-Sphere WebShell 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) mode and (2) zipfile parameters in a URL reques…
CVE-2003-12472003-12-31Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a lon…