CVE-2007-6495

inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named (1) db, (2)…

published December 20, 2007

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named (1) db, (2) www, (3) Special, and (4) log at arbitrary locations under the web root via a modified Dirroot parameter in an AddUser action to accounts/AccountActions.asp. NOTE: this can be leveraged for remote code execution by changing the permissions of \Forum\db, which is configured for execution of ASP scripts with administrative privileges, and then uploading a script to \Forum\db.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04370 · 91.2th percentile
Published
2007-12-20T20:00Z
EPSS history
Timeline
  • 20 DEC 20:00Z
    inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named (1) db, (2)…
    cvelistv5