Hosting Controller addsubsite.asp Security Bypass

The version of Hosting Controller installed on the remote host does not properly validate access to administrative scripts. An attacker can exploit this flaw to register accounts simply by passing arguments to the 'addsubsite.asp' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2005-1654

Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set...

PT-2005-2631 · Hosting Controller · Hosting Controller

Name of the Vulnerable Software and Affected Versions: Hosting Controller versions 6.1 Hotfix 1.9 and earlier Description: The issue allows remote attackers to register arbitrary users via a direct request to "addsubsite.asp" with the loginname and password parameters set. This enables unauthoriz...