Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit, via a direct request to AccountActions.asp and modifying the CreditLimit parameter in an UpdateCreditLimit action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HostingController AccountActions.asp 数据篡改漏洞
Vulnerability Description
Hosting Controller是一套Web站点管理系统。 Hosting Controller 6.1 Hotfix 2.1版本存在漏洞。 远程认证用户可通过直接请求AccountActions.asp并修改UpdateCreditLimit操作中的CreditLimit参数，执行未经授权的操作，例如修改信用额度。
CVSS Information
N/A
Vulnerability Type
N/A