Vulnerability Details CVE-2005-1654
Hosting Controller 6.1 Hotfix 1.9 and earlier allows remote attackers to register arbitrary users via a direct request to addsubsite.asp with the loginname and password parameters set.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.021
EPSS Ranking 83.4%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2005-1654
-
cpe:2.3:a:hostingcontroller:hosting_controller:*
-
cpe:2.3:a:hostingcontroller:hosting_controller:6.1