Approved changes feed: RSS · Atom

cpe:2.3:a:ehcp:easy_hosting_control_panel:0.37.12.b:*:*:*:*:*:*:*

part: a version: 0.37.12.b update: *

VendorEhcp (0e5a33f2-5a20-503a-a24e-f7145978a528)
ProductEasy Hosting Control Panel (78554146-1157-5b71-b4bd-8fedc5aacb9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/thedeletosh/ehcp purl2cpe 2026-06-01 10:16:56.903306

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6619 vulnerable 2026-06-08 05:11:54.049832 Details available
Easy Hosting Control Panel (EHCP) v0.37.12.b makes it easier for attackers to crack database passwords by leveraging use of a weak hashing algorithm without a salt.
Published: 2018-05-11T21:00:00.000Z
Updated: 2024-08-05T06:10:10.846Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6618 vulnerable 2026-06-08 05:11:54.049532 Details available
Easy Hosting Control Panel (EHCP) v0.37.12.b allows attackers to obtain sensitive information by leveraging cleartext password storage.
Published: 2018-05-11T21:00:00.000Z
Updated: 2024-08-05T06:10:10.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6617 vulnerable 2026-06-08 05:11:54.049214 Details available
Easy Hosting Control Panel (EHCP) v0.37.12.b, when using a local MySQL server, allows attackers to change passwords of arbitrary database users by leveraging failure to ask for the current password.
Published: 2018-05-11T21:00:00.000Z
Updated: 2024-08-05T06:10:10.685Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6458 vulnerable 2026-06-08 05:11:53.761708 Details available
Easy Hosting Control Panel (EHCP) v0.37.12.b allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging lack of CSRF protection.
Published: 2018-05-11T21:00:00.000Z
Updated: 2024-08-05T06:01:49.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6362 vulnerable 2026-06-08 05:11:53.654259 Details available
Easy Hosting Control Panel (EHCP) v0.37.12.b has XSS via the domainop action parameter, as demonstrated by reading the PHPSESSID cookie.
Published: 2018-05-11T21:00:00.000Z
Updated: 2024-08-05T06:01:48.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6361 vulnerable 2026-06-08 05:11:53.653841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.