Design/Logic Flaw

Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to 1 import an arbitrary plan via a request to hosting/importhostingplans.asp; or 2 change an arbitrary plan via a request to hosting/AutoSignUpPlans.asp with the a save, b 30,...

CVE-2007-6503

Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to 1 import an arbitrary plan via a request to hosting/importhostingplans.asp; or 2 change an arbitrary plan via a request to hosting/AutoSignUpPlans.asp with the a save, b 30,...

CVE-2007-6503

CVE-2007-6503 affects Hosting Controller 6.1 with Hotfix 3.3 and earlier. The issue arises from multiple unspecified vulnerabilities that allow remote authenticated users to modify plans: (1) importing an arbitrary plan via hosting/importhostingplans.asp, or (2) changing an arbitrary plan via hos...