CVE:CVE-2007-6499
CNNVD:CNNVD-200712-285
Hosting Controller 6.1 Hot fix 3.3版本及其早期版本存在未明漏洞。远程验证用户可以借助具有"主机ID值"的fp2002/UNINSTAL.asp的一个请求卸载任意帐户的FrontPage扩展名。
solution:Upgrade hosting_controller hosting_controller to a higher version than 6.1_hotfix_3.3,and avoid the version (,6.1_hotfix_3.3]