CVE-2007-6502

CVE-2007-6502 affects Hosting Controller 6.1 Hotfix 3.3 and earlier. The vulnerability exposes sensitive information through: (1) AdminName and AdminLevel parameters in fp2000/NEWSRVR.asp that disclose usernames; (2) certain XML HTTP requests to hosting/css.asp via Microsoft.XMLHTTP/MSXML2.XMLHTT...