CVE-2007-6497

Hosting Controller 6.1 Hot fix 3.3 - RCE

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-6497. PoCs published by BugReport.IR.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in Hosting Controller 6.1 Hot fix <= 3.3, including authentication bypass, privilege escalation, and arbitrary file upload leading to remote code execution. It provides detailed steps and HTML/JS PoC code for exploiting these flaws.

Description

Hosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and email parameters; and (2) allows remote authenticated users to change a credit amount and increase a discount via an UpdateUser action to Accounts/AccountActions.asp with modified UserName, FullName, CreditLimit, and DefaultDiscount parameters, a related issue to CVE-2005-2219.

Exploits (1)

exploitdb WORKING POC VERIFIED
by BugReport.IR · textwebappsasp
https://www.exploit-db.com/exploits/4730

The exploit demonstrates multiple vulnerabilities in Hosting Controller 6.1 Hot fix <= 3.3, including authentication bypass, privilege escalation, and arbitrary file upload leading to remote code execution. It provides detailed steps and HTML/JS PoC code for exploiting these flaws.

Classification
Working Poc 95%
Attack Type
Rce | Auth Bypass | Sqli | Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Hosting Controller 6.1 Hot fix <= 3.3
No auth needed
Prerequisites: Access to the target Hosting Controller web interface
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (7)

Core 7
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28973
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/485028/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3474
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4730
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26862
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1019222

Scores

EPSS 0.0167
EPSS Percentile 82.4%

Details

CWE
CWE-264
Status published
Products (1)
hosting_controller/hosting_controller < 6.1_hotfix_3.3
Published Dec 20, 2007
Tracked Since Feb 18, 2026