Access Control

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete "gateway information" via a request to OpenApi/GatewayVaria…CVE-2007-6500Hosting Controller · 4.5% likely

   CWE-264

2. inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named (1) db, (2) www, (3) Special, an…CVE-2007-6495Hosting Controller · 4.4% likely

   CWE-264

3. Hosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and e…CVE-2007-6497Hosting Controller · 3.0% likely

   CWE-264

4. Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password paramete…CVE-2007-6496Hosting Controller · 2.7% likely

   CWE-264

5. Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninstall the FrontPage extensions of an arbitrary account via a r…CVE-2007-6499Hosting Controller · 2.5% likely

   CWE-264

6. Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters…CVE-2005-1654Hostingcontroller · 2.5% likely

   CWE-425

7. Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choose…CVE-2007-6501Hosting Controller · 2.4% likely

   CWE-264

8. Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to (1) import an arbitrary plan via a request to hosting/im…CVE-2007-6503Hosting Controller · 2.2% likely

   CWE-264

9. Unspecified vulnerability in IIS/iibind.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the headers of arbitrary hosts via an uns…CVE-2007-6504Hosting Controller · 2.2% likely

   CWE-264

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.