CVE-2006-0685

Virtual Hosting Control System <2.4.7.1 - Privilege Escalation

Title source: llm

Description

The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, which allows remote attackers to gain unauthorized access.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Roman Medina-Heigl Hernandez · htmlwebappsphp
https://www.exploit-db.com/exploits/27205

Scores

EPSS 0.0907
EPSS Percentile 92.7%

Details

Status published
Products (1)
virtual_hosting_control_system/virtual_hosting_control_system < 2.4.7.1
Published Feb 15, 2006
Tracked Since Feb 18, 2026