| Package | Affected versions | Patched versions |
|---|---|---|
| hosting controller | = 1.1= 1.3= 1.4= 1.4.1= 1.4b= 2002= 2002_rc_1= 6.1= 6.1_hotfix_1.4= 6.1_hotfix_1.7= 6.1_hotfix_1.9= 6.1_hotfix_2.0= 6.1_hotfix_2.1= 6.1_hotfix_2.2= 6.1_hotfix_2.3= 6.1_hotfix_2.4= 6.1_hotfix_3.1≤ 6.1_hotfix_3.2 |
Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in (1) DisableForum.asp and (2) enableForum.asp. NOTE: it was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and earlier.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free