CVE-2006-3147

published 2006-06-22

CVE-2006-3147: Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all…

Priority P4 34 medium 6.5 CVSS 2.0

AV N AC L Au S C P I P A P

EXPLOIT

Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is related to a previously disclosed issue such as CVE-2005-1788.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
hosting_controller	hosting_controller	—	—
hosting_controller	hosting_controller	—	—
hosting_controller	hosting_controller	—	—
hosting_controller	hosting_controller	—	—
hosting_controller	hosting_controller	—	—
hosting_controller	hosting_controller	—	—
hosting_controller	hosting_controller	—	—
hosting_controller	hosting_controller	—	—
hosting_controller	hosting_controller	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.