Sql injection

SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the 1 GatewayID parameter in an add action in AddGatewaySettings.asp and 2 IP parameter in IPManager.asp...

CVE-2005-3038

Unspecified vulnerability in Hosting Controller 6.1 before Hotfix 2.4 allows remote attackers to list and read contents of arbitrary drives, related to "the PHP vulnerability."...

Hosting Controller 6.1 - error.asp Cross-Site Scripting

Hosting Controller 6.1 - error.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/14080/info Hosting Controller is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'error.asp' script. A...

CVE-2005-1788

The CVE-2005-1788 entry describes an SQL injection vulnerability in resellerresources.asp within Hosting Controller 6.1 Hotfix 2.0, exploitable via the jresourceid parameter. Remote attackers can execute arbitrary SQL commands through this input. Affected software/component: Hosting Controller 6....

Hosting Controller 0.6.1 - User Registration (3)

Hosting Controller 0.6.1 - User Registration 3 Username : emailaddress : firstname : milw0rm.com 2005-05-27...

Hosting Controller 0.6.1 - User Registration (3)

Username : emailaddress : firstname : milw0rm.com 2005-05-27...

CVE-2005-1654

Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set...

CVE-2005-0695

The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...