CVE

Id
29856  
CVE No.
CVE-2007-6499  
Status
Candidate  
Description
Unspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to uninstall the FrontPage extensions of an arbitrary account via a request to fp2002/UNINSTAL.asp with a "host id (IIS) value."  
Phase
Assigned (20071220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
315567 29856 CVE-2007-6499 BUGTRAQ:20071213 Hosting Controller - Multiple Security Bugs (Extremely Critical)  View
315568 29856 CVE-2007-6499 URL:http://www.securityfocus.com/archive/1/archive/1/485028/100/0/threaded  View
315569 29856 CVE-2007-6499 MILW0RM:4730  View
315570 29856 CVE-2007-6499 URL:http://www.milw0rm.com/exploits/4730  View
315571 29856 CVE-2007-6499 CONFIRM:http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html  View
315572 29856 CVE-2007-6499 BID:26862  View
315573 29856 CVE-2007-6499 URL:http://www.securityfocus.com/bid/26862  View
315574 29856 CVE-2007-6499 SECTRACK:1019222  View
315575 29856 CVE-2007-6499 URL:http://securitytracker.com/id?1019222  View
315576 29856 CVE-2007-6499 SECUNIA:28973  View
315577 29856 CVE-2007-6499 URL:http://secunia.com/advisories/28973  View
315578 29856 CVE-2007-6499 SREASON:3474  View
315579 29856 CVE-2007-6499 URL:http://securityreason.com/securityalert/3474  View
315580 29856 CVE-2007-6499 XF:hostingcontroller-multiple-security-bypass(39038)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56057 JVNDB-2007-004749 Hosting Controller における "支払方法" を有効または無効にされる脆弱性 Hosting Controller には、"支払方法" を有効または無効にされる脆弱性が存在します。 CVE-2007-6501 29856 5.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004749.html  View