Actionspider

Name of the Vulnerable Software and Affected Versions: Hosting Controller (affected versions not specified) Description: A cross-site scripting (XSS) issue exists in the error.asp file of Hosting Controller, allowing remote attackers to inject arbitrary web script or HTML via the `error` parameter. This could potentially lead to unauthorized actions on the affected system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Adobe Version Cue (affected versions not specified) Description: The issue concerns the stopserver.sh and startserver.sh scripts in Adobe Version Cue on Mac OS X. These scripts use the current working directory to find and execute the productname.sh script. This behavior allows local users to execute arbitrary code by copying the scripts to a user-controlled directory and then calling them from that location. Recommendations: For Adobe Version Cue, consider restricting access to the stopserver.sh and startserver.sh scripts to minimize the risk of exploitation. As a temporary workaround, avoid using these scripts until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: ASP Calendar (affected versions not specified) Description: The issue concerns the control panel in ASP Calendar, which does not require authentication for access. This allows remote attackers to gain unauthorized access by making a direct request to the "main.asp" endpoint. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.