CVE-2007-6498

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via…

published December 20, 2007

CVSS
—
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) email and (2) loginname parameters to Hosting/Addreseller.asp, (3) the sortfield parameter to accounts/accountmanager.asp, (4) the GateWayID parameter to OpenApi/GatewayVariables.asp, and possibly (5) unspecified vectors to IIS/iibind.asp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01190 · 67.5th percentile
Published
2007-12-20T20:00Z
EPSS history
Timeline
  • 20 DEC 20:00Z
    Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via…
    cvelistv5