CVE:CVE-2005-1654
CNNVD:CNNVD-200505-1104
Hosting Controller 6.1 Hotfix 1.9及更早版本允许远程攻击者通过直接请求带有设置好的登录名和密码的addsubsite.asp来注册任意用户。
solution:Upgrade hosting_controller hosting_controller to a higher version than 6.1_hotfix_1.4,6.1_hotfix_1.9,and avoid the version 6.1_hotfix_1.4,6.1_hotfix_1.9