Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-6497
HistoryDec 20, 2007 - 8:46 p.m.

CVE-2007-6497

2007-12-2020:46:00
CWE-264
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

86.1%

JSON

Hosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and email parameters; and (2) allows remote authenticated users to change a credit amount and increase a discount via an UpdateUser action to Accounts/AccountActions.asp with modified UserName, FullName, CreditLimit, and DefaultDiscount parameters, a related issue to CVE-2005-2219.

Affected configurations

NVD
Node
hosting_controllerhosting_controllerRange≤6.1_hotfix_3.3

Related

cve 2
prion 1
cvelist 2
nessus 1
nvd 1
cve
cve
CVE-2007-6497
2007-12-20 20:46:00
CVE-2005-2219
2022-10-03 16:22:48
prion
prion
Design/Logic Flaw
2007-12-20 20:46:00
cvelist
cvelist
CVE-2007-6497
2007-12-20 20:00:00
CVE-2005-2219
2022-10-03 16:22:48
nessus
nessus
Hosting Controller < 6.1 Hotfix 2.2 Multiple Vulnerabilities
2005-07-14 00:00:00
nvd
nvd
CVE-2005-2219
2005-07-12 04:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

86.1%

JSON
Related for NVD:CVE-2007-6497
cve2prion1cvelist2nessus1nvd1