CVE-2006-0581

MEDIUM 6.5CVE-2006-0581 · Published 08/02/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
hosting controller hosting_controller	`= 6.1_hotfix_2.8`	No fix yet

Description

SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the (1) GatewayID parameter in an add action in AddGatewaySettings.asp and (2) IP parameter in IPManager.asp.

References

secunia.com/advisories/18731 · Vendor Advisory
securitytracker.com/id · Exploit
osvdb.org/22982
osvdb.org/22983
vupen.com/english/advisories/2006/0460
exchange.xforce.ibmcloud.com/vulnerabilities/24537

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free