Multiple bugs in hostingcontroller updated since 28.01.2002
Published:		21.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		1725
Type:		remote
Level:		6/10
Description:		Different error message on wrong user name and password makes it possible to check account existance. Directory traversal allows to access files outside web root.

Affected:

HOSTINGCONTROLLE : Hosting Controller 1.4

Original document		Bao Dai Nhan, Another vulnerability in hosting controller (21.05.2002)
		hdlkha_(at)_yahoo.com, Hosting Controller still have dangerous bugs! (17.05.2002)
		Phuong Nguyen, Hosting Directory Traversal madness... (19.03.2002)
		Ahmet Sabri ALPER, [ARL02-A01] Vulnerability in Hosting Controller (28.01.2002)

Discuss:

Read or add your comments to this news (0 comments)