header-logo
Suggest Exploit
vendor:
Hosting Controller
by:
str0ke
7.5
CVSS
HIGH
Unauthenticated User Registration
CWE
Product Name: Hosting Controller
Affected Version From: All versions
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested: Windows
2005

Hosting Controller Unauthenticated User Registration

Attacker can create user and host on the target system by exploiting the vulnerability in the admin/hosting/addsubsite.asp page.

Mitigation:

No mitigation or remediation information provided.
Source

Exploit-DB raw data: