CVE-2006-0581

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-02-08 · updated 2026-06-16

Description

SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the (1) GatewayID parameter in an add action in AddGatewaySettings.asp and (2) IP parameter in IPManager.asp.

Affected products

Hosting Controller: 6.1_hotfix_2.8

References

http://secunia.com/advisories/18731
http://securitytracker.com/id?1015584
http://www.osvdb.org/22982
http://www.osvdb.org/22983
http://www.vupen.com/english/advisories/2006/0460
https://exchange.xforce.ibmcloud.com/vulnerabilities/24537
http://secunia.com/advisories/18731
http://securitytracker.com/id?1015584
http://www.osvdb.org/22982
http://www.osvdb.org/22983
http://www.vupen.com/english/advisories/2006/0460
https://exchange.xforce.ibmcloud.com/vulnerabilities/24537

Get alerted when CVE-2006-0581 or the next vulnerability affects your stack