Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-0684. PoCs published by Roman Medina-Heigl Hernandez.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass and HTML injection vulnerability in Virtual Hosting Control System (VHCS). It uses a crafted form submission to change the password without proper authentication.
Description
change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the password, which may allow remote attackers to gain unauthorized access.
Exploits (1)
This exploit demonstrates an authentication bypass and HTML injection vulnerability in Virtual Hosting Control System (VHCS). It uses a crafted form submission to change the password without proper authentication.