CVE-2006-0581

Published: Feb 8, 2006Modified: Apr 16, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the (1) GatewayID parameter in an add action in AddGatewaySettings.asp and (2) IP parameter in IPManager.asp.

Affected (1)

Products: Hosting Controller: Hosting Controller

Hosting Controller

1 product

Hosting Controller

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hosting Controller Hosting Controller	Version 6.1_hotfix_2.8

References (12)

http://secunia.com/advisories/18731

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1015584

Source: cve@mitre.org

Exploit

http://www.osvdb.org/22982

Source: cve@mitre.org

http://www.osvdb.org/22983

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0460

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24537

Source: cve@mitre.org

http://secunia.com/advisories/18731