CVE-2002-0773

The CVE-2002-0773 entry describes a vulnerability in imp_rootdir.asp for Hosting Controller that enables remote attackers to copy or delete arbitrary files and directories by issuing a direct request to imp_rootdir.asp and altering parameters (1) ftp, (2) owwwPath, and (3) oftpPath). Affected sof...

CVE-2002-0772

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. dot dot in the RootName parameter...

CVE-2002-0773

improotdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to improotdir.asp and modifying parameters such as 1 ftp, 2 owwwPath, and 3 oftpPath...

CVE-2002-0774

Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed...

Hosting Controller Vulnerability

In Hosting Controller 2002, it is possible to change the password of any user, Administrator. To exploit this, one would have to: Add a user /accounts/getuserdesc.asp Edit the user, changing the password /accounts/updateuserdesc.asp Then using something like the @stake web proxy, change the hidde...

CVE-2002-0465

Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. dot dot in the OpenPath parameter...

CVE-2002-0466

The CVE-2002-0466 entry concerns Hosting Controller (version 1.4.1 and earlier). The connected OpenVAS entries describe vulnerable ASP pages for Hosting Controller, indicating multiple remote exploits exist that could be used to access confidential data or escalate privileges on the Web server. T...

CVE-2002-0466

Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to 1 Statsbrowse.asp, 2 servubrowse.asp, 3 browsedisk.asp, 4 browsewebalizerexe.asp, or 5 sqlbrowse.asp...

CVE-2002-0465

Hosting Controller 1.4.1 and earlier are affected by CVE-2002-0465. A directory traversal flaw in filemanager.asp allows remote attackers to read/modify arbitrary files and execute commands via an open path parameter containing .. (dot dot). The issue is identified in the NVD/CVE records for this...

Another vulnerability in hosting controller

1/If admin doesn't change or delete user AdvWebadmin, the default password of this user is advcomm500349, you can creat your own account or use this account to hack the server. 1/ A foolish vulnerability, i can view the harddisk by using the file browse.asp in directory admin...

Hosting Controller 1.x - 'Browse.asp' File Disclosure

source: https://www.securityfocus.com/bid/4778/info Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems. The 'browse.asp' script is prone to an issue which may allow a remote attacker to view...

Hosting Controller 1.x - DSNManager Directory Traversal

Hosting Controller 1.x - DSNManager Directory Traversal source: https://www.securityfocus.com/bid/4759/info Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems. The DSNManager script does not...

Hosting Controller 1.4 - Import Root Directory Command Execution

Hosting Controller 1.4 - Import Root Directory Command Execution source: https://www.securityfocus.com/bid/4761/info Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems. The Import Root...

Hosting Controller 1.4 - Import Root Directory Command Execution

source: https://www.securityfocus.com/bid/4761/info Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems. The Import Root Directory improotdir.asp script does not force an authentication...

Hosting Controller 1.x - DSNManager Directory Traversal

source: https://www.securityfocus.com/bid/4759/info Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems. The DSNManager script does not sufficiently filter dot-dot-slash ../ sequences from URL...

CVE-2002-0212

The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack...

CVE-2002-0212

The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack...

CVE-2002-0212

The CVE-2002-0212 issue affects Hosting Controller 1.1–1.4.1, where login error messages differ between valid and invalid usernames, enabling remote enumeration of valid accounts and facilitating brute-force attempts. Root cause: inconsistent authentication responses revealing user existence. Imp...

Hosting Directory Traversal madness...

Hosting Controller directory traversal /../ madness Date 03/14/2002 Some hosting providers mailed me and asked me to do a bit more researches about Hosting Controller, they said their clients' sites have been deleted mysteriously, and defacement still happens quite at large even though they have...

[ARL02-A01] Vulnerability in Hosting Controller

+/--------------------- ALPER Research Labs --------/--- --------/+ +/--------------------- Security Advisory -------/---------- --/+ +/--------------------- ID: ARL02-A01 ------/----------- --/+ +/--------------------- [email protected] -----/------- -------/+ Advisory Information...