Secunia

Soroush Dalili has reported some vulnerabilities in Hosting Controller, which can be exploited by malicious people to bypass certain security restrictions and to conduct SQL injection attacks.

1) An error exists in the verification of user permissions when accessing certain scripts. This can be exploited to create or delete every sites' virtual directories via DisableForum.asp and EnableForum.asp.

2) Input passed to the "ForumID" parameter in DisableForum.asp and EnableForum.asp is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

The vulnerabilities are reported in version 6.1 with Hotfix 3.2. Other versions may also be affected.

Solution
Install Hotfix 3.3.
Further details available in Customer Area

Provided and/or discovered by
Soroush Dalili

Changelog
Further details available in Customer Area

Original Advisory
http://www.kapda.ir/advisory-442.html

Deep Links
Links available in Customer Area