Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

hosting controller hosting controller 2002 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2002-0773
imp_rootdir.asp for Hosting Controller allows remote malicious users to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) owwwPath, and (3) oftpPath.
Hosting Controller Hosting Controller 1.4.1Hosting Controller Hosting Controller 1.4bHosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 1.3
7.5
CVSSv2
CVE-2002-0212
The login for Hosting Controller 1.1 up to and including 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote malicious users to determine the existence of valid usernames and makes it easier to conduct a brute force attack.
Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 1.4.1Hosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.4b
6.4
CVSSv2
CVE-2002-0772
Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote malicious users to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.
Hosting Controller Hosting Controller 1.4bHosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 1.4.1
10
CVSSv2
CVE-2002-0774
Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote malicious users to gain privileges if the password is not changed.
Hosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 1.4.1Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 1.4b
5
CVSSv2
CVE-2002-0775
browse.asp in Hosting Controller allows remote malicious users to view arbitrary directories by specifying the target pathname in the FilePath parameter.
Hosting Controller Hosting Controller 1.4bHosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 1.4.1
6.4
CVSSv2
CVE-2002-0464
Directory traversal vulnerability in Hosting Controller 1.4.1 and previous versions allows remote malicious users to read and modify arbitrary files and directories via a .. (dot dot) in arguments to (1) file_editor.asp, (2) folderactions.asp, or (3) editoractions.asp.
Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 1.4.1
10
CVSSv2
CVE-2002-0465
Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and previous versions allows remote malicious users to read and modify arbitrary files, and execute commands, via a .. (dot dot) in the OpenPath parameter.
Hosting Controller Hosting Controller 1.4.1Hosting Controller Hosting Controller 1.4
5
CVSSv2
CVE-2002-0466
Hosting Controller 1.4.1 and previous versions allows remote malicious users to browse arbitrary directories via a full C: style pathname in the filepath arguments to (1) Statsbrowse.asp, (2) servubrowse.asp, (3) browsedisk.asp, (4) browsewebalizerexe.asp, or (5) sqlbrowse.asp.
Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 1.4.1
7.8
CVSSv2
CVE-2006-1764
Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote malicious users to obtain sensitive information such as user name and password credentials. NOTE: the provenance of this information is unknown; the ...
Hosting Controller Hosting Controller 6.1Hosting Controller Hosting Controller 6.1 Hotfix 1.4Hosting Controller Hosting ControllerHosting Controller Hosting Controller 2002Hosting Controller Hosting Controller 2002 Rc 1Hosting Controller Hosting Controller 6.1 Hotfix 2.3Hosting Controller Hosting Controller 6.1 Hotfix 2.8Hosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 6.1 Hotfix 1.7Hosting Controller Hosting Controller 6.1 Hotfix 1.9Hosting Controller Hosting Controller 1.4.1Hosting Controller Hosting Controller 1.4bHosting Controller Hosting Controller 6.1 Hotfix 2.0Hosting Controller Hosting Controller 6.1 Hotfix 2.1
7.5
CVSSv2
CVE-2002-0776
getuserdesc.asp in Hosting Controller 2002 allows remote malicious users to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix.
Hosting Controller Hosting Controller 2002
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook