Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

hosting controller hosting controller vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv2
CVE-2006-1764
Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote malicious users to obtain sensitive information such as user name and password credentials. NOTE: the provenance of this information is unknown; the ...
Hosting Controller Hosting Controller 6.1Hosting Controller Hosting Controller 6.1 Hotfix 1.4Hosting Controller Hosting ControllerHosting Controller Hosting Controller 2002Hosting Controller Hosting Controller 2002 Rc 1Hosting Controller Hosting Controller 6.1 Hotfix 2.3Hosting Controller Hosting Controller 6.1 Hotfix 2.8Hosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 6.1 Hotfix 1.7Hosting Controller Hosting Controller 6.1 Hotfix 1.9Hosting Controller Hosting Controller 1.4.1Hosting Controller Hosting Controller 1.4bHosting Controller Hosting Controller 6.1 Hotfix 2.0Hosting Controller Hosting Controller 6.1 Hotfix 2.1
7.5
CVSSv2
CVE-2006-5629
Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote malicious users to execute arbitrary SQL commands via the ForumID parameter in (1) DisableForum.asp and (2) enableForum.asp. NOTE: it was later reported that the vulnerability is prese...
Hosting Controller Hosting ControllerHosting Controller Hosting Controller 6.1 Hotfix 2.4Hosting Controller Hosting Controller 6.1 Hotfix 3.1Hosting Controller Hosting Controller 6.1 Hotfix 2.2Hosting Controller Hosting Controller 6.1 Hotfix 2.3Hosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 6.1 Hotfix 1.7Hosting Controller Hosting Controller 6.1 Hotfix 1.9Hosting Controller Hosting Controller 6.1Hosting Controller Hosting Controller 6.1 Hotfix 1.4Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 1.4.1Hosting Controller Hosting Controller 1.4bHosting Controller Hosting Controller 6.1 Hotfix 2.0Hosting Controller Hosting Controller 6.1 Hotfix 2.1Hosting Controller Hosting Controller 2002Hosting Controller Hosting Controller 2002 Rc 1
7.5
CVSSv2
CVE-2006-5630
Hosting Controller 6.1 before Hotfix 3.3 allows remote malicious users to (1) delete the virtual directory of an arbitrary site via a modified ForumID parameter in a disableforum action in DisableForum.asp and (2) create an arbitrary forum virtual directory via an empty ForumID p...
Hosting Controller Hosting Controller 2002 Rc 1Hosting Controller Hosting Controller 6.1Hosting Controller Hosting Controller 6.1 Hotfix 2.4Hosting Controller Hosting Controller 6.1 Hotfix 3.1Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 1.4.1Hosting Controller Hosting Controller 6.1 Hotfix 2.0Hosting Controller Hosting Controller 6.1 Hotfix 2.1Hosting Controller Hosting Controller 1.4bHosting Controller Hosting Controller 2002Hosting Controller Hosting Controller 6.1 Hotfix 2.2Hosting Controller Hosting Controller 6.1 Hotfix 2.3Hosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 6.1 Hotfix 1.4Hosting Controller Hosting Controller 6.1 Hotfix 1.7Hosting Controller Hosting Controller 6.1 Hotfix 1.9Hosting Controller Hosting Controller
6.5
CVSSv2
CVE-2006-3147
Unspecified vulnerability in Hosting Controller prior to 6.1 (aka Hotfix 3.2) allows remote authenticated malicious users to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it i...
Hosting Controller Hosting Controller 6.1Hosting Controller Hosting Controller 6.1 Hotfix 1.4Hosting Controller Hosting Controller 6.1 Hotfix 2.9Hosting Controller Hosting Controller 6.1 Hotfix 2.3Hosting Controller Hosting Controller 6.1 Hotfix 2.8Hosting Controller Hosting Controller 6.1 Hotfix 1.7Hosting Controller Hosting Controller 6.1 Hotfix 1.9Hosting Controller Hosting Controller 6.1 Hotfix 2.0Hosting Controller Hosting Controller 6.1 Hotfix 2.1
4.3
CVSSv2
CVE-2005-2077
Cross-site scripting (XSS) vulnerability in error.asp for Hosting Controller allows remote malicious users to inject arbitrary web script or HTML via the error parameter.
Hosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 6.1 Hotfix 1.7Hosting Controller Hosting Controller 6.1 Hotfix 1.9Hosting Controller Hosting Controller 1.4.1Hosting Controller Hosting Controller 1.4bHosting Controller Hosting Controller 6.1Hosting Controller Hosting Controller 6.1 Hotfix 1.4Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 6.1 Hotfix 2.0
5
CVSSv2
CVE-2005-0694
Hosting Controller 6.1 Hotfix 1.7 and previous versions stores log files under the web root, which allows remote malicious users to obtain sensitive information via a direct request to HCDiskQuotaService.csv.
Hosting Controller Hosting Controller 6.1 Hotfix 1.4Hosting Controller Hosting Controller 6.1 Hotfix 1.7Hosting Controller Hosting Controller 1.4bHosting Controller Hosting Controller 6.1Hosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 1.4.1
5
CVSSv2
CVE-2005-0695
The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and previous versions allows remote malicious users to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field.
Hosting Controller Hosting Controller 6.1 Hotfix 1.4Hosting Controller Hosting Controller 6.1 Hotfix 1.7Hosting Controller Hosting Controller 1.4bHosting Controller Hosting Controller 6.1Hosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 1.4.1
10
CVSSv2
CVE-2002-0773
imp_rootdir.asp for Hosting Controller allows remote malicious users to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) owwwPath, and (3) oftpPath.
Hosting Controller Hosting Controller 1.4.1Hosting Controller Hosting Controller 1.4bHosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 1.3
7.5
CVSSv2
CVE-2002-0212
The login for Hosting Controller 1.1 up to and including 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote malicious users to determine the existence of valid usernames and makes it easier to conduct a brute force attack.
Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 1.4.1Hosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.4b
6.4
CVSSv2
CVE-2002-0772
Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote malicious users to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.
Hosting Controller Hosting Controller 1.4bHosting Controller Hosting Controller 1.1Hosting Controller Hosting Controller 1.3Hosting Controller Hosting Controller 1.4Hosting Controller Hosting Controller 1.4.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook