Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-2219. PoCs published by Soroush Dalili.
AI-analyzed exploit summary This exploit demonstrates an authenticated credit manipulation vulnerability in Hosting Controller 6.1 HotFix 2.1 and older. By submitting a crafted POST request to AccountActions.asp, an authenticated user can arbitrarily modify their credit limit and discount values.
Description
Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit, via a direct request to AccountActions.asp and modifying the CreditLimit parameter in an UpdateCreditLimit action.
Exploits (1)
This exploit demonstrates an authenticated credit manipulation vulnerability in Hosting Controller 6.1 HotFix 2.1 and older. By submitting a crafted POST request to AccountActions.asp, an authenticated user can arbitrarily modify their credit limit and discount values.