Vulnerability in Hosting Controller
CVE-2005-1784
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp.
EPSS: 0.056 (92.1th percentile) — read the EPSS interpretation.
Affected products
- Hosting_controller
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)