high7.5Public exploit code
CVE-2005-1784
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an update…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hosting Controller 0.6.1 - User Registration (3)2005-05-27 · webapps · asp · Verified
Impact
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hosting Controller | Hosting Controller | through 6.1_hotfix_2.0 |