CVE-2005-0695

Опубликовано: 07 мар. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field.

Ссылки

http://isun.shabgard.org/hc2.txt
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=111026083314947&w=2
http://secunia.com/advisories/14522
Patch
Vendor Advisory
http://isun.shabgard.org/hc2.txt
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=111026083314947&w=2
http://secunia.com/advisories/14522
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*

cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*

cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*

cpe:2.3:a:hosting_controller:hosting_controller:6.1:*:*:*:*:*:*:*

cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.4:*:*:*:*:*:*:*

cpe:2.3:a:hosting_controller:hosting_controller:6.1_hotfix_1.7:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00424

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-cwcx-8gfg-9p74

github

почти 4 года назад