CVE-2007-6500

CVE-2007-6500 affects Hosting Controller 6.1 Hot fix 3.3 and earlier. Affected component: OpenApi/GatewayVariables.asp, where remote authenticated users can delete gateway information. Root cause is an unspecified vulnerability allowing authenticated actions to impact gateway data. CVSSv2 base sc...

CVE-2007-6499

The CVE-2007-6499 entry concerns Hosting Controller 6.1 Hotfix 3.3 and earlier. Affected component: the FrontPage extensions uninstall feature via the fp2002/UNINSTAL.asp endpoint, where a remote authenticated user could trigger uninstall of FrontPage extensions for an arbitrary account by supply...

CVE-2007-6498

CVE-2007-6498 : Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL via parameters to Hosting/Addreseller.asp (email, loginname), accounts/accountmanager.asp (sortfield), OpenApi/GatewayVariables.asp (G...

CVE-2007-6497

CVE-2007-6497 affects Hosting Controller 6.1 Hotfix 3.3 and earlier. The vulnerability allows an unprivileged remote attacker to change arbitrary user profiles via Hosting/Addreseller.asp by supplying modified loginname and email, and allows remote authenticated users to modify account attributes...

CVE-2007-6496

CVE-2007-6496 affects Hosting Controller 6.1 Hotfix 3.3 and earlier. The vulnerability allows remote attackers to register arbitrary users via addsubsite.asp with loginname and password parameters, after certain requests to default.asp and selectdomain.asp; it is a related issue to CVE-2005-1654....

CVE-2007-6495

CVE-2007-6495 affects Hosting Controller 6.1 Hot fix 3.3 and earlier. A remote authenticated user can modify Dirroot via AddUser (accounts/AccountActions.asp) to change permissions on web root folders (db, www, Special, log). This can enable remote code execution by making Forum\db executable as ...

CVE-2007-6494

CVE-2007-6494 affects Hosting Controller 6.1 Hot fix 3.3 and earlier. The provided descriptions state a sequence-based authentication bypass where a remote attacker can obtain login access by first sending a request to hosting/addres reseller.asp with a username in the reseller parameter, followe...

CVE-2007-6500

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete "gateway information" via a request to OpenApi/GatewayVariables.asp...

CVE-2007-6503

Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to 1 import an arbitrary plan via a request to hosting/importhostingplans.asp; or 2 change an arbitrary plan via a request to hosting/AutoSignUpPlans.asp with the a save, b 30,...

CVE-2007-6504

Unspecified vulnerability in IIS/iibind.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the headers of arbitrary hosts via an unspecified parameter...

CVE-2007-6494

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, followed by a request to AdminSettings/displays.asp with the DecideAction and ChangeSkin parameters...

CVE-2007-6498

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 email and 2 loginname parameters to Hosting/Addreseller.asp, 3 the sortfield parameter to accounts/accountmanager.asp, 4 the...

CVE-2007-6499

Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninstall the FrontPage extensions of an arbitrary account via a request to fp2002/UNINSTAL.asp with a "host id IIS value."...

CVE-2007-6502

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain sensitive information via 1 the AdminName and AdminLevel parameters to fp2000/NEWSRVR.asp, which discloses usernames; and 2 certain XML HTTP requests to hosting/css.asp using Microsoft.XMLHTTP or...

Hosting Controller - Multiple Security Bugs (Extremely Critical)

Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From company - There is temporary solution in this report Exploit:...

Hosting Controller 6.1 Hot fix <= 3.3 Multiple Remote Vulnerabilities

No description provided by source. Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From company - There is temporary...

hc-multi.txt

Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From company - There is temporary solution in this report Exploit:...

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From...

Hosting Controller 6.1 Hot fix <= 3.3 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== Hosting Controller 6.1 Hot fix = 3.3 Multiple Remote Vulnerabilities ===================================================================== Title: Multiple Security Bugs ...

hosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities

Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From company - There is temporary solution in this report Exploit:...