| Package | Affected versions | Patched versions |
|---|---|---|
| hosting controller | = 1.1= 1.3= 1.4.1= 1.4b= 6.1= 6.1_hotfix_1.4= 6.1_hotfix_1.7 |
The password recovery feature (forgotpassword.asp) in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free