Easy Hosting Control Panel for Ubuntu

Add domain & FTP without login

Bug #865889 reported by Jasman Putra Pasaman
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Easy Hosting Control Panel for Ubuntu
Fix Released
Medium
Unassigned

Bug Description

Add domain & FTP without login

Vulnerable:
http://site.com/vhosts/ehcp/?op=applyforaccount
http://site.com/vhosts/ehcp/?op=applyforftpaccount
http://site.com/vhosts/ehcp/?op=applyfordomainaccount

Tested on:
0.29.13
0.29.10
0.29.10.2
0.29.09

Tags: ehcp
Jasman Putra Pasaman (jasman)
visibility: private → public
Revision history for this message
AHMED ALI (l0v3r3m) wrote :

i got "This is disabled by admin, if you are admin, enabled it in ehcp->options."
anyway this not Vulnerable
i'm tested on 0.29.13 must you have auth

Revision history for this message
ehcpdeveloper (ehcpdeveloper) wrote : Re: [Bug 865889] Re: Add domain & FTP without login

This is an old issue, fixed in recent versions of ehcp.
Please use ver 0.30 or newer.
you may download new versions always from www.ehcp.net/ehcp_yeni.tgz
(now, it is 0.30, being tested, about to release)
anyway, thanks for bug report.

ehcpdeveloper (ehcpdeveloper)
Changed in ehcp:
importance: Undecided → Medium
status: New → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.