Strix
26.1K

CVE-2006-1764

UnknownEPSS 1.61%

Last modified

CVE-2006-1764 is a vulnerability of currently unknown severity. Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as user name and password credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information.. EPSS estimates a 1.61% chance of exploitation in the next 30 days.

Description

Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as user name and password credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Metrics

EPSS Probability
1.61%

72.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
Hosting ControllerHosting Controller<= 6.1_hotfix_2.9
Hosting ControllerHosting Controller1.1
Hosting ControllerHosting Controller1.3
Hosting ControllerHosting Controller1.4
Hosting ControllerHosting Controller1.4.1
Hosting ControllerHosting Controller1.4b
Hosting ControllerHosting Controller6.1
Hosting ControllerHosting Controller6.1_hotfix_1.4
Hosting ControllerHosting Controller6.1_hotfix_1.7
Hosting ControllerHosting Controller6.1_hotfix_1.9
Hosting ControllerHosting Controller6.1_hotfix_2.0
Hosting ControllerHosting Controller6.1_hotfix_2.1
Hosting ControllerHosting Controller6.1_hotfix_2.3
Hosting ControllerHosting Controller6.1_hotfix_2.8
Hosting ControllerHosting Controller2002
Hosting ControllerHosting Controller2002_rc_1

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2006-1764?
Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as user name and password credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
How severe is CVE-2006-1764?
Severity scoring for CVE-2006-1764 is pending analysis. The EPSS model estimates a 1.61% probability of exploitation in the next 30 days.
How do I fix CVE-2006-1764?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2006-1764?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST