high7.5Public exploit code
CVE-2005-1654
Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hosting Controller 0.6.1 - User Registration (2)2005-05-07 · remote · windows · Verified
- Hosting Controller 0.6.1 - User Registration (1)2005-05-04 · remote · windows · Verified
Impact
Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hostingcontroller | Hosting Controller | before 6.1 Version 6.1 |