Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-30777: H-Sphere

Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.

CVE
#sql#xss#web#windows#microsoft#linux#java#php#postgres#ssl

H-Sphere

Stable release

3.6.2 / May 15, 2013

Written in

Java

Operating system

Linux, FreeBSD, Windows

Type

Web hosting control panel

License

proprietary

Website

http://www.parallels.com/products/hsphere/

H-Sphere is a web hosting Automation Control Panel for shared web hosting services that was developed by Positive Software and acquired by Parallels, Inc. in September 2007.[1] It is available for Linux, Unix, and Windows environments, and works with MySQL, PostgreSQL, and Microsoft SQL Server databases. H-Sphere has been written in Java and works with any SQL-compliant database.

Features[edit]

  • Built-in billing system with variety of payment methods
  • Various hosting solutions (*nix and Windows, database, load balancing, RealMedia, MS Exchange, SharePoint, FreeVPS, etc.)
  • Electronic mail system with antivirus and antispam filtering and integrated WebMail
  • Around 30 Payment gateways and 6 E-Payment Providers supported
  • Integrated support center
  • Multiple user tools
  • Integrated PHP/MySQL applications, both built-in and by means of add-ons[2]

Advantages[edit]

  • Scalable multiserver cluster: different physical and logical servers (web, mail, DNS etc.) are managed from one control panel. More servers can be added on the fly.
  • Multilingual support includes English, German, Dutch, French, Italian, Spanish, Russian, Portuguese (Brazil), and several other languages integrated by means of add-ons.
  • H-Sphere is recognized for end-user features availability, such as mail system, site building tools, SSL, etc. “Beginning webmasters may find H-Sphere too complicated for their needs. More advanced users, however, appreciate the features and control that H-Sphere offers the end user.”
  • H-Sphere may give place to other panels as regards its ease of use, but not its online documentation.
  • H-Sphere has enlisted a community of online supporters who name it among their favorite control panels.[3]
  • Integrated Backup capability with the ClusterLogics system created by Cartika

Disadvantages[edit]

  • Licenses for H-Sphere accounts are more expensive than those of its competitors. Though, it is noted that H-Sphere licenses are reusable and sold for a cluster, not for a server, as with Ensim Pro.
  • Some customers state H-Sphere has too many advanced features and thus is a too complicated solution for small hosting companies, especially as a single server installation. While others note that H-Sphere advantages are more demonstrable on multi-server clusters.
  • On a single server mode H-Sphere consumes more server resources than other major single server control panels.[4]
  • H-Sphere control panel interface extensively uses JavaScript. Some reviewers regard it as a disadvantage.[5]
  • H-Sphere control panel by default works on non-standard 8080 and 8443 ports that may be blocked by client-side firewalls; but this can easily be changed in the configuration.
  • H-Sphere (like cPanel, but unlike Plesk) provides online file source editing, however with H-Sphere only allows editing of .txt or .html files and without line numbers in edit mode, thus limiting PHP and other script editing possibilities.

other webhosting control panel software[edit]

  • Baifox
  • cPanel
  • DirectAdmin
  • Hosting Controller
  • ispCP
  • ISPConfig
  • Kloxo
  • Plesk
  • SysCP
  • Webmin

See also[edit]

  • Parallels, the maintainers of H-Sphere
  • Web hosting control panel
  • Comparison of web hosting control panels

References[edit]

  1. ^ "Parallels Newsroom". 28 February 2020.
  2. ^ "Archived copy". Archived from the original on 2007-01-17. Retrieved 2007-05-24.{{cite web}}: CS1 maint: archived copy as title (link) CS1 maint: bot: original URL status unknown (link) 24/7 Solutions.
  3. ^ h-sphere control panels on WHTop.com
  4. ^ Post here, your favorite Control Panel. WebHostingTalk Forums.
  5. ^ "Hosting Obzor". Archived from the original on 2007-06-09. Retrieved 2007-05-24.

External links[edit]

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907