medium6.5Public exploit code
CVE-2006-3147
Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all resel…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hosting Controller 6.1 Hotfix 3.1 - Privilege Escalation2006-07-06 · webapps · asp · Verified
Impact
Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is related to a previously disclosed issue such as CVE-2005-1788.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hosting Controller | Hosting Controller | Versions 6.1, 6.1_hotfix_1.4, 6.1_hotfix_1.7, 6.1_hotfix_1.9, 6.1_hotfix_2.0, 6.1_hotfix_2.1 |
References
- NVD record
- CVE.org record
- http://hostingcontroller.com/english/logs/hotfixlogv61_3_2.html
- http://secunia.com/advisories/20743
- http://securitytracker.com/id?1016444
- http://www.osvdb.org/26693
- http://www.securityfocus.com/bid/18565
- http://www.vupen.com/english/advisories/2006/2459
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27340
- http://hostingcontroller.com/english/logs/hotfixlogv61_3_2.html
- http://secunia.com/advisories/20743
- http://securitytracker.com/id?1016444
- http://www.osvdb.org/26693
- http://www.securityfocus.com/bid/18565
- http://www.vupen.com/english/advisories/2006/2459
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27340