Hosting Controller Multiple Remote Vulnerabilities
BID:26862
Info
Hosting Controller Multiple Remote Vulnerabilities
| Bugtraq ID: | 26862 |
| Class: | Unknown |
| CVE: |
CVE-2007-6494 CVE-2007-6495 CVE-2007-6496 CVE-2007-6497 CVE-2007-6499 CVE-2007-6500 CVE-2007-6501 CVE-2007-6502 CVE-2007-6503 CVE-2007-6504 CVE-2006-1620 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 13 2007 12:00AM |
| Updated: | Jul 05 2016 10:00PM |
| Credit: | AmnPardaz Security Research Team discovered these vulnerabilities. |
| Vulnerable: |
Hosting Controller Hosting Controller 6.1 Hot fix 3.3 |
| Not Vulnerable: | |
Discussion
Hosting Controller Multiple Remote Vulnerabilities
Hosting Controller is prone to 14 remote vulnerabilities, including seven unauthorized-access issues, four SQL-injection issues, two information-disclosure issues, and one HTML-injection issue.
An attacker can exploit these issues to compromise the affected application, execute arbitrary code within the context of the webserver process, steal cookie-based authentication credentials, access or modify data, exploit latent vulnerabilities in the underlying database, obtain sensitive information, and gain unauthorized access to the affected application.
Hosting Controller is prone to 14 remote vulnerabilities, including seven unauthorized-access issues, four SQL-injection issues, two information-disclosure issues, and one HTML-injection issue.
An attacker can exploit these issues to compromise the affected application, execute arbitrary code within the context of the webserver process, steal cookie-based authentication credentials, access or modify data, exploit latent vulnerabilities in the underlying database, obtain sensitive information, and gain unauthorized access to the affected application.
Exploit / POC
Hosting Controller Multiple Remote Vulnerabilities
An attacker can exploit these issues via a browser.
The following exploits are available:
An attacker can exploit these issues via a browser.
The following exploits are available:
Solution / Fix
Hosting Controller Multiple Remote Vulnerabilities
Solution:
The vendor released a patch and an advisory to address these issues. Please see the references for more information.
Hosting Controller Hosting Controller 6.1 Hot fix 3.3
Solution:
The vendor released a patch and an advisory to address these issues. Please see the references for more information.
Hosting Controller Hosting Controller 6.1 Hot fix 3.3
-
Hosting Controller Post-Hotfix-3_3-sec-Patch.zip
http://hostingcontroller.com/english/downloads/patches/Post-Hotfix-3_3 -sec-Patch.zip
References
Hosting Controller Multiple Remote Vulnerabilities
References:
References:
- HC6.1: Release Notes for Post Hotfix 3.3 Security Patch (Hosting Controller)
- Hosting Controller Homepage (Hosting Controller)
- Hosting Controller - Multiple Security Bugs (Extremely Critical) ([email protected])