1. CVE-Search
  2. CVE-2006-5630
ID CVE-2006-5630
Summary Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to (1) delete the virtual directory of an arbitrary site via a modified ForumID parameter in a disableforum action in DisableForum.asp and (2) create an arbitrary forum virtual directory via an empty ForumID parameter in an enableforum action in EnableForum.asp. This vulnerability is addressed in the following product update: Hosting Controller, Hosting Controller, 6.1 Hotfix 3.3
References
Vulnerable Configurations
  • cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:6.1:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.4:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.7:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.9:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.9:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.0:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.1:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.2:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.3:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.4:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_3.1:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:*:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:*:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:2002:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:2002:*:*:*:*:*:*:*
  • cpe:2.3:a:hosting_controller:hosting_controller:2002_rc_1:*:*:*:*:*:*:*
    cpe:2.3:a:hosting_controller:hosting_controller:2002_rc_1:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 17-10-2018 - 21:44)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bugtraq 20061025 Hosting Controller 6.1 Hotfix <= 3.2 Vulnerability
misc http://www.kapda.ir/advisory-442.html
sectrack 1017103
secunia 22607
sreason 1804
vupen ADV-2006-4296
Last major update 17-10-2018 - 21:44
Published 31-10-2006 - 22:07
Last modified 17-10-2018 - 21:44
Back to Top