Vulnerability in Hosting Controller

CVE-2005-2219

Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit, via a direct request to AccountActions.asp and modifying the CreditLimit parameter in an UpdateCreditLimit action.

EPSS: 0.019 (77.8th percentile) — read the EPSS interpretation.

Affected products

References