CVE-2005-0694

Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv.

Published: Mar 7, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-0694
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
hosting_controller / hosting_controller	6.1_hotfix_1.4	6.1_hotfix_1.4.x
hosting_controller / hosting_controller	1.1	1.1.x
hosting_controller / hosting_controller	1.3	1.3.x
hosting_controller / hosting_controller	6.1_hotfix_1.7	6.1_hotfix_1.7.x
hosting_controller / hosting_controller	1.4b	1.4b.x
hosting_controller / hosting_controller	6.1	6.1.x
hosting_controller / hosting_controller	1.4.1	1.4.1.x

http://isun.shabgard.org/hc2.txt
http://marc.info/?l=bugtraq&m=111026083314947&w=2
http://secunia.com/advisories/14522

Vulnerability Database

289,871

CVE-2005-0694