CVE-2006-1620 - admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE

Back Back to CVE browser

MEDIUM

admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE

Published Apr 5, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 2.24%

Description

admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE. It was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and earlier.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (9)

http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html
x_refsource_CONFIRM
http://secunia.com/advisories/28973
third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/24773
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/429731/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/485028/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/26862
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/25673
vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/39038
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/4730
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html		x_refsource_CONFIRM
http://secunia.com/advisories/28973		third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/24773		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/429731/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/485028/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/26862		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/25673		vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/39038		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/4730		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 5, 2006

Updated Aug 7, 2024

Reserved Apr 5, 2006

Link CVE-2006-1620

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-1620

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-1620