Hosting Controller Multiple Input Validation Vulnerabilities
BID:20848
Info
Hosting Controller Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 20848 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 01 2006 12:00AM |
| Updated: | Nov 02 2006 04:57PM |
| Credit: | Soroush Dalili is credited with discovering these vulnerabilities. |
| Vulnerable: |
Hosting Controller Hosting Controller 6.1.0 Hotfix 3.2 0 Hosting Controller Hosting Controller 6.1.0 Hotfix 3.1 0 Hosting Controller Hosting Controller 6.1 Hotfix 2.4 Hosting Controller Hosting Controller 6.1 Hotfix 2.3 Hosting Controller Hosting Controller 6.1 Hotfix 2.2 Hosting Controller Hosting Controller 6.1 Hotfix 2.1 Hosting Controller Hosting Controller 6.1 Hotfix 2.0 Hosting Controller Hosting Controller 6.1 Hotfix 1.9 Hosting Controller Hosting Controller 6.1 Hotfix 1.7 Hosting Controller Hosting Controller 6.1 Hotfix 1.4 |
| Not Vulnerable: |
Hosting Controller Hosting Controller 6.1.0 Hotfix 3.3 |
Discussion
Hosting Controller Multiple Input Validation Vulnerabilities
Hosting Controller is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These include multiple SQL-injection issues and vulnerabilities that allow an attacker to create or delete virtual directories.
A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database implementation, and create or delete arbitrary virtual directories.
Version 6.1 running hotfix 3.2 and prior are vulnerable to these issues.
Hosting Controller is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These include multiple SQL-injection issues and vulnerabilities that allow an attacker to create or delete virtual directories.
A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database implementation, and create or delete arbitrary virtual directories.
Version 6.1 running hotfix 3.2 and prior are vulnerable to these issues.
Exploit / POC
Hosting Controller Multiple Input Validation Vulnerabilities
Attackers can exploit these issues via a web client.
Attackers can exploit these issues via a web client.
Solution / Fix
Hosting Controller Multiple Input Validation Vulnerabilities
Solution:
The vendor has released an update to address these issues. Please see the references for more information.
Hosting Controller Hosting Controller 6.1 Hotfix 2.3
Hosting Controller Hosting Controller 6.1 Hotfix 1.9
Hosting Controller Hosting Controller 6.1 Hotfix 1.7
Hosting Controller Hosting Controller 6.1 Hotfix 2.0
Hosting Controller Hosting Controller 6.1 Hotfix 1.4
Hosting Controller Hosting Controller 6.1 Hotfix 2.2
Hosting Controller Hosting Controller 6.1 Hotfix 2.1
Solution:
The vendor has released an update to address these issues. Please see the references for more information.
Hosting Controller Hosting Controller 6.1 Hotfix 2.3
-
Hosting Controller HotFixV61_2_4.exe
http://hostingcontroller.com/english/downloads/HotFixV61_2_4.exe
Hosting Controller Hosting Controller 6.1 Hotfix 1.9
-
Hosting Controller HotFixV61_2_4.exe
http://hostingcontroller.com/english/downloads/HotFixV61_2_4.exe
Hosting Controller Hosting Controller 6.1 Hotfix 1.7
-
Hosting Controller HotFixV61_2_4.exe
http://hostingcontroller.com/english/downloads/HotFixV61_2_4.exe
Hosting Controller Hosting Controller 6.1 Hotfix 2.0
-
Hosting Controller HotFixV61_2_4.exe
http://hostingcontroller.com/english/downloads/HotFixV61_2_4.exe
Hosting Controller Hosting Controller 6.1 Hotfix 1.4
-
Hosting Controller HotFixV61_2_4.exe
http://hostingcontroller.com/english/downloads/HotFixV61_2_4.exe
Hosting Controller Hosting Controller 6.1 Hotfix 2.2
-
Hosting Controller HotFixV61_2_4.exe
http://hostingcontroller.com/english/downloads/HotFixV61_2_4.exe
Hosting Controller Hosting Controller 6.1 Hotfix 2.1
-
Hosting Controller HotFixV61_2_4.exe
http://hostingcontroller.com/english/downloads/HotFixV61_2_4.exe
References
Hosting Controller Multiple Input Validation Vulnerabilities
References:
References:
- Hosting Controller 6.1 Hotfix <= 3.2 Multi Vuln. (Soroush Dalili)
- Hosting Controller Home Page (Hosting Controller)