CVE-2006-5630

Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to (1) delete the virtual directory of an arbitrary site via a modified ForumID parameter in a…

published October 31, 2006

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to (1) delete the virtual directory of an arbitrary site via a modified ForumID parameter in a disableforum action in DisableForum.asp and (2) create an arbitrary forum virtual directory via an empty ForumID parameter in an enableforum action in EnableForum.asp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01843 · 78.9th percentile
Published
2006-10-31T22:00Z
EPSS history
Timeline
  • 31 OCT 22:00Z
    Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to (1) delete the virtual directory of an arbitrary site via a modified ForumID parameter in a…
    cvelistv5