CVE:CVE-2006-0581
CNNVD:CNNVD-200602-083
Hosting Controller 6.1 Hotfix 2.8中存在SQL注入漏洞。远程认证用户可以借助(1)AddGatewaySettings.asp添加操作中的GatewayID参数和(2)IPManager.asp中的IP参数执行任意SQL命令。
solution:Upgrade hosting_controller hosting_controller to a higher version than 6.1_hotfix_2.8,and avoid the version 6.1_hotfix_2.8