| Package | Affected versions | Patched versions |
|---|---|---|
| hosting controller | ≤ 6.1_hotfix_2.0 |
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free