GCVE - cpe:2.3:a:hosting_controller:hosting_controller:2002:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hosting_controller:hosting_controller:2002:*:*:*:*:*:*:*

part: a version: 2002 update: *

Vendor	Hosting Controller (`e4fa818f-3696-5ea4-8e17-ab16835f6bb5`)
Product	Hosting Controller (`b3e9c8c9-93a5-5960-a199-b3295c73e896`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-5630`	vulnerable	2026-06-08 04:49:20.965366	Details available Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to (1) delete the virtual directory of an arbitrary site via a modified ForumID parameter in a disableforum action in DisableForum.asp and (2) create an arbitrary forum virtual directory via an empty ForumID parameter in an enableforum action in EnableForum.asp. Published: 2006-10-31T22:00:00.000Z Updated: 2024-08-07T19:55:54.074Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/449937/100/0/threaded http://www.kapda.ir/advisory-442.html http://securitytracker.com/id?1017103 http://secunia.com/advisories/22607 http://securityreason.com/securityalert/1804	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5629`	vulnerable	2026-06-08 04:49:20.963885	Details available Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in (1) DisableForum.asp and (2) enableForum.asp. NOTE: it was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and earlier. Published: 2006-10-31T22:00:00.000Z Updated: 2024-08-07T19:55:54.086Z Open on db.gcve.eu Reference links http://secunia.com/advisories/28973 http://www.kapda.ir/advisory-442.html http://www.securityfocus.com/archive/1/485028/100/0/threaded http://securitytracker.com/id?1017103 http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1764`	vulnerable	2026-06-08 04:48:58.006165	Details available Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as user name and password credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Published: 2006-04-13T01:00:00.000Z Updated: 2024-08-07T17:27:27.910Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/1268 http://secunia.com/advisories/19569 http://www.osvdb.org/24447	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-0776`	vulnerable	2026-06-08 04:46:22.199147	Details available getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix. Published: 2003-04-02T05:00:00.000Z Updated: 2024-08-08T03:03:47.936Z Open on db.gcve.eu Reference links http://hostingcontroller.com/english/logs/sp2log.html http://www.iss.net/security_center/static/9554.php http://www.securityfocus.com/bid/5229 http://online.securityfocus.com/archive/1/282129	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Hosting Controller

Notes

PURL mappings

Vulnerability references

Contribute