Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-1784. PoCs published by Soroush Dalili.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in Hosting Controller 6.1 HotFix 2.0 and older, allowing an authenticated user to modify other users' profiles, including email addresses, which can be leveraged to reset passwords via the 'forgot password' feature.
Description
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp.
Exploits (1)
This exploit demonstrates an authentication bypass vulnerability in Hosting Controller 6.1 HotFix 2.0 and older, allowing an authenticated user to modify other users' profiles, including email addresses, which can be leveraged to reset passwords via the 'forgot password' feature.