EDB-4730
functionalhosting controller 6.1 hot fix 3.3 - Multiple Vulnerabilities
view exploit source exploit_dbverifiedtype webappsauthor BugReport.IRpublished 2007-12-13catalog exploit_db
01
exploited CVEs (11)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2007-6494US | high10.0 | Exploit | ||
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, fo… | ||||
| CVE-2007-6495US | medium6.5 | Exploit | ||
inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named (1) db, (2) www, (3) Special, and… | ||||
| CVE-2007-6496US | medium6.8 | Exploit | ||
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameter… | ||||
| CVE-2007-6497US | high7.5 | Exploit | ||
Hosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and em… | ||||
| CVE-2007-6498US | high7.5 | Exploit | ||
Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) email and (2… | ||||
| CVE-2007-6499US | medium5.5 | Exploit | ||
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninstall the FrontPage extensions of an arbitrary account via a re… | ||||
| CVE-2007-6500US | medium4.9 | Exploit | ||
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete "gateway information" via a request to OpenApi/GatewayVariab… | ||||
| CVE-2007-6501US | medium5.5 | Exploit | ||
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/chooset… | ||||
| CVE-2007-6502US | medium5.5 | Exploit | ||
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain sensitive information via (1) the AdminName and AdminLevel parameters to fp2000/NEWSRVR.a… | ||||
| CVE-2007-6503US | medium5.5 | Exploit | ||
Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to (1) import an arbitrary plan via a request to hosting/imp… | ||||
| CVE-2007-6504US | medium5.5 | Exploit | ||
Unspecified vulnerability in IIS/iibind.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the headers of arbitrary hosts via an unsp… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan