CVE-2007-6495 (Hosting Controller) - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

HeapOverflow Computer Security Community & Forums : Heap Overflow.com

		HeapOverflow Computer Security Community & Forums : Heap Overflow.com > Computer Security: Discussions > Advisories
CVE-2007-6495 (Hosting Controller)

Mark Forums Read

Notices

Welcome to you visitor! This community is mainly dedicated to the computer and security, if you're looking for DFind scanner or others exploits codes you will find them into the Projects section, feel free to start Blogging and remember to always keep an eye and start talking about security Advisories & public Exploits.

Advisories Discuss about all newly security flaws classed by CVE entries and reviewed by security experts

CVE-2007-6495 (Hosting Controller)

This is a discussion on "CVE-2007-6495 (Hosting Controller)" within the Advisories part of the Computer Security: Discussions section; inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named (1) db, (2) www, (3) Special, and (4) log at arbitrary locations under the web root ...

Reply

#1 (permalink)

Old

21-12-07

Heap is offline

Reporter

Join Date: Oct 2007

Posts: 5,970

Thanks: 0

Thanked 4 Times in 4 Posts

Rep Power: 1197

Heap is on a distinguished road

nvd

CVE-2007-6495 (Hosting Controller)

inc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named (1) db, (2) www, (3) Special, and (4) log at arbitrary locations under the web root via a modified Dirroot parameter in an AddUser action to accounts/AccountActions.asp. NOTE: this can be leveraged for remote code execution by changing the permissions of \Forum\db, which is configured for execution of ASP scripts with administrative privileges, an...

More...

Reply With Quote

Sponsor

Advertiser

Reply

Tags
controller, cve20076495, hosting

« CVE-2007-3876 (Mac OS X) | CVE-2007-6508 (xeCMS) »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
CVE-2007-6504 (Hosting Controller)	Heap	Advisories	0	21-12-07 20:09
CVE-2007-6503 (Hosting Controller)	Heap	Advisories	0	21-12-07 20:09
CVE-2007-6498 (Hosting Controller)	Heap	Advisories	0	21-12-07 20:09
CVE-2007-6497 (Hosting Controller)	Heap	Advisories	0	21-12-07 20:09
CVE-2007-6496 (Hosting Controller)	Heap	Advisories	0	21-12-07 20:09

heapoverflow.com - SEOmeter SEO tools

Locations of visitors to this page

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47