Published: 20/12/2007 Updated: 15/10/2018

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 655

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and previous versions allows remote authenticated users to change the permissions of directories named (1) db, (2) www, (3) Special, and (4) log at arbitrary locations under the web root via a modified Dirroot parameter in an AddUser action to accounts/AccountActions.asp. NOTE: this can be leveraged for remote code execution by changing the permissions of \Forum\db, which is configured for execution of ASP scripts with administrative privileges, and then uploading a script to \Forum\db.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hosting controller hosting controller 6.1_hotfix_3.3

Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 61 Hot fix <= 33 Vendor URL: wwwhostingcontrollercom Solution: N/A From company - There is temporary solution in this report Exploit: Available Release Date: 2007 - December Credit: www ...

CWE-264 http://www.securityfocus.com/bid/26862 http://securitytracker.com/id?1019222 http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html http://secunia.com/advisories/28973 http://securityreason.com/securityalert/3474 http://osvdb.org/44184 https://www.exploit-db.com/exploits/4730 http://www.securityfocus.com/archive/1/485028/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/4730/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-6495

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect