CVE-2005-1654

Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set.

• CWE-425

• http://isun.shabgard.org/hc3.txtBroken Link, Exploit, Patch
• http://secunia.com/advisories/15271Broken Link
• http://isun.shabgard.org/hc3.txtBroken Link, Exploit, Patch
• http://secunia.com/advisories/15271Broken Link

Published

May 18, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-1648Gurgens (GASoft) Ultimate Forum 1.0 stores the db/Genid.dat …
• CVE-2005-1649The IPv6 support in Windows XP SP2, 2003 Server SP1, and Lon…
• CVE-2005-1650The web mail service in Woppoware PostMaster 4.2.2 (build 3.…
• CVE-2005-1651Directory traversal vulnerability in message.htm for Woppowa…
• CVE-2005-1652message.htm for Woppoware PostMaster 4.2.2 (build 3.2.5) all…
• CVE-2005-1653Cross-site scripting (XSS) vulnerability in message.htm for …
• CVE-2005-1655AOL Instant Messenger 5.5.x and earlier allows remote attack…
• CVE-2005-1656Mercur Messaging 2005 SP2 allows remote attackers to read th…
• CVE-2005-1657Multiple directory traversal vulnerabilities in Mercur Messa…
• CVE-2005-1658Directory traversal vulnerability in filemanager.cpp in MySe…
• CVE-2005-1659Cross-site scripting (XSS) vulnerability in filemanager.cpp …
• CVE-2005-1660HTMLJunction EZGuestbook stores the guestbook.mdb file under…