high7.5
CVE-2002-0776
getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username par…
Impact
getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hosting Controller | Hosting Controller | Version 2002 |
References
- NVD record
- CVE.org record
- http://hostingcontroller.com/english/logs/sp2log.html
- http://online.securityfocus.com/archive/1/282129
- http://www.iss.net/security_center/static/9554.php
- http://www.securityfocus.com/bid/5229
- http://hostingcontroller.com/english/logs/sp2log.html
- http://online.securityfocus.com/archive/1/282129
- http://www.iss.net/security_center/static/9554.php
- http://www.securityfocus.com/bid/5229