QwikSec

Security Database

CVE

CWE

Training

CVE-2006-5630

Published: Oct 31, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to (1) delete the virtual directory of an arbitrary site via a modified ForumID parameter in a disableforum action in DisableForum.asp and (2) create an arbitrary forum virtual directory via an empty ForumID parameter in an enableforum action in EnableForum.asp.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20061025 Hosting Controller 6.1 Hotfix <= 3.2 Vulnerability

mailing-list

x_refsource_BUGTRAQ

http://www.kapda.ir/advisory-442.html

x_refsource_MISC

vdb-entry

x_refsource_SECTRACK

third-party-advisory

x_refsource_SECUNIA

third-party-advisory

x_refsource_SREASON

vdb-entry

x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.