| Package | Affected versions | Patched versions |
|---|---|---|
| hosting controller | = 6.1< 6.1 | 6.1 |
Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free