Vulnerabilities

TI-2022-12908 CVE-2022-30777 · GHSA-27qc-3h99-8rcj

Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.

LOW 32

Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02296 Published 2022-05-16 No fix listed CWE-79

TI-2012-04230 CVE-2012-5004 · GHSA-m422-vwp4-mfgf

Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3…

LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3 Patch 1 allow remote attackers to hijack the authentication of admins for requests that (1) add group plans via admin/group_plans.html…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00923 Published 2012-09-19 No fix listed CWE-352

TI-2008-06155 CVE-2008-6465 · GHSA-rq9g-wqrp-v34r

Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in…

LOW 28

Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the (1) err, (2) errorcode, and (3…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05114 Published 2009-03-13 No fix listed CWE-79

Vulnerabilities

Filters

Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.

Multiple cross-site request forgery (CSRF) vulnerabilities in Parallels H-Sphere 3.3…

Multiple cross-site scripting (XSS) vulnerabilities in login.php in webshell4 in…