| Max CVSS | 10.0 | Min CVSS | 4.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-1620 | 5.0 |
admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE. It was
|
18-10-2018 - 16:33 | 05-04-2006 - 10:04 | |
| CVE-2007-6500 | 4.9 |
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete "gateway information" via a request to OpenApi/GatewayVariables.asp.
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6501 | 5.5 |
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choosetranstype.asp.
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6494 | 10.0 |
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, followed by a request to AdminSettings/displays.asp with the DecideActio
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6499 | 5.5 |
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninstall the FrontPage extensions of an arbitrary account via a request to fp2002/UNINSTAL.asp with a "host id (IIS) value."
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6496 | 6.8 |
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameters set, when preceded by certain requests to hosting/default.asp and ho
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 | |
| CVE-2007-6503 | 5.5 |
Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to (1) import an arbitrary plan via a request to hosting/importhostingplans.asp; or (2) change an arbitrary plan via a request to
|
15-10-2018 - 21:54 | 20-12-2007 - 20:46 |