Hosting Controller

Every one of the 38 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, f…CVE-2007-6494Hosting Controller · 12% likely

   CWE-20

2. Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName param…CVE-2002-0772Hosting Controller · 9.2% likely
3. browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.CVE-2002-0775Hosting Controller · 8.3% likely
4. Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for U…CVE-2005-1784Hosting Controller · 5.6% likely
5. imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters s…CVE-2002-0773Hosting Controller · 4.5% likely
6. Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to delete "gateway information" via a request to OpenApi/GatewayVaria…CVE-2007-6500Hosting Controller · 4.5% likely

   CWE-264

7. inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named (1) db, (2) www, (3) Special, an…CVE-2007-6495Hosting Controller · 4.4% likely

   CWE-264

8. Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via…CVE-2002-0465Hosting Controller · 4.0% likely
9. Cross-site scripting (XSS) vulnerability in error.asp for Hosting Controller allows remote attackers to inject arbitrary web script or HTML via the error parameter.CVE-2005-2077Hosting Controller · 3.6% likely
10. Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in (1) Disabl…CVE-2006-5629Hosting Controller · 3.2% likely

    CWE-89

11. Hosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and e…CVE-2007-6497Hosting Controller · 3.0% likely

    CWE-264

12. Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter t…CVE-2004-1217Hosting Controller · 2.9% likely
13. Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain sensitive information via (1) the AdminName and AdminLevel parameters to fp2000/NEWSRVR.…CVE-2007-6502Hosting Controller · 2.8% likely

    CWE-200

14. Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.CVE-2002-0774Hosting Controller · 2.7% likely
15. Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password paramete…CVE-2007-6496Hosting Controller · 2.7% likely

    CWE-264

16. Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all resellers, or change rese…CVE-2006-3147Hosting Controller · 2.7% likely
17. Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninstall the FrontPage extensions of an arbitrary account via a r…CVE-2007-6499Hosting Controller · 2.5% likely

    CWE-264

18. Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters…CVE-2005-1654Hostingcontroller · 2.5% likely

    CWE-425

19. Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to enable or disable "pay type" via a request to adminsettings/choose…CVE-2007-6501Hosting Controller · 2.4% likely

    CWE-264

20. Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. (dot dot) in argument…CVE-2002-0464Hosting Controller · 2.3% likely
21. admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modif…CVE-2006-1620Hosting Controller · 2.2% likely
22. Multiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to (1) import an arbitrary plan via a request to hosting/im…CVE-2007-6503Hosting Controller · 2.2% likely

    CWE-264

23. Unspecified vulnerability in IIS/iibind.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the headers of arbitrary hosts via an uns…CVE-2007-6504Hosting Controller · 2.2% likely

    CWE-264

24. SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter.CVE-2005-1788Hosting Controller · 2.1% likely
25. Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authenticated users to read and modify arbitrary files, and list arbit…CVE-2006-6814Hosting Controller · 2.1% likely
26. Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to (1) Statsbrowse.asp, (2) ser…CVE-2002-0466Hosting Controller · 2.0% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.