295 matches found
CVE-2005-1654
Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set...
CVE-2005-1654
CVE-2005-1654 affects Hosting Controller 6.1 Hotfix 1.9 and earlier. The vulnerability allows remote attackers to register arbitrary users by issuing a direct request to addsubsite.asp with the loginname and password parameters set, enabling unauthorized account creation. Related documentation ci...
PT-2005-2631 · Hosting Controller · Hosting Controller
Name of the Vulnerable Software and Affected Versions: Hosting Controller versions 6.1 Hotfix 1.9 and earlier Description: The issue allows remote attackers to register arbitrary users via a direct request to "addsubsite.asp" with the loginname and password parameters set. This enables unauthoriz...
Hosting Controller <= 0.6.1 Unauthenticated User Registeration (2nd)
Exploit for unknown platform in category remote exploits ==================================================================== Hosting Controller include include s...
Hosting Controller <= 0.6.1 Unauthenticated User Registeration (2nd)
No description provided by source. / Hosting Controller = v6.1 exploit sileHOSTCxpl This exploit utilize two ways for exploiting vulnerability present into Hosting Controller. This exploit create new user with relative passwd and registered your host with mail server into Hosting Controller...
Hosting Controller 0.6.1 - User Registration (2)
Hosting Controller 0.6.1 - User Registration 2 / Hosting Controller include include include include include define PORT1 80 // port of web server define PORT...
Hosting Controller 0.6.1 - User Registration (2)
/ Hosting Controller include include include include include define PORT1 80 // port of web server define PORT2 8077 // port o...
Hosting Controller 0.6.1 - User Registration (1)
Hosting Controller 0.6.1 - User Registration 1 Domain: Username: INPUT type="hidden" name="htype" value="27" id="htyp...
Hosting Controller <= 0.6.1 Unauthenticated User Registration Exploit
Exploit for unknown platform in category remote exploits ===================================================================== Hosting Controller INPUT type="hidden" name="domaintypecheck" value="SECOND" id="Hidden1...
Hosting Controller unauthenticated user registeration
-= Security Advisory =- Advisory Information Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : unauthenticated user registeration Risk : High! Vulnerable Versions: All version Tested on: v.6.1 Hotfix 1.9 Vend...
Hosting Controller 0.6.1 - User Registration (1)
Domain: Username: INP...
Hosting Controller Multiple Unauthenticated information disclose
-= Security Advisory =- Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerability : Multiple Unauthenticated information disclose Risk : Low Vulnerable Versions: All versi...
CVE-2005-0695
The CVE-2005-0695 issue affects Hosting Controller 6.1 Hotfix 1.7 and earlier, where the forgotpassword.asp password recovery flow can let a remote attacker infer the owner's e-mail address by submitting part of a domain in the login ID field. The underlying vulnerability is described as partial ...
CVE-2005-0694
Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv...
CVE-2005-0695
The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...
CVE-2005-0694
Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv...
CVE-2005-0695
The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...
Hosting Controller 1.x6.1 - Multiple Information Disclosure Vulnerabilities
Hosting Controller 1.x6.1 - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/12748/info Hosting Controller is reported prone to multiple information disclosure vulnerabilities. These issues can allow an attacker to disclose sensitive information, which may...
Hosting Controller 1.x/6.1 - Multiple Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/12748/info Hosting Controller is reported prone to multiple information disclosure vulnerabilities. These issues can allow an attacker to disclose sensitive information, which may be used to carry out further attacks against a computer. An attacker can...
CVE-2004-1217
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to 1 Statsbrowse.asp or 2 Generalbrowse.asp...