CVE-2007-6496 : Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to host

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameters set, when preceded by certain requests to hosting/default.asp and hosting/selectdomain.asp, a related issue to CVE-2005-1654.

Published 2007-12-20 20:46:00

Updated 2018-10-15 21:54:39

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-6496

EPSS FAQ

1.49%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 87 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-6496

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

Products affected by CVE-2007-6496

Hosting Controller » Hosting Controller » Version: 6.1 Hotfix 3.3
cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_3.3:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2007-6496

Exploit prediction scoring system (EPSS) score for CVE-2007-6496

CVSS scores for CVE-2007-6496

CWE ids for CVE-2007-6496

References for CVE-2007-6496

Products affected by CVE-2007-6496