CVE-2006-5629

no score yetEPSS 3.2%

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in (1) DisableForum.asp and (2) enableForum.asp. NOTE: it was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and earlier.

EPSS: 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2006-10-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

hosting_controller:hosting_controller

References

http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html
http://secunia.com/advisories/22607
http://secunia.com/advisories/28973
http://securitytracker.com/id?1017103
http://www.kapda.ir/advisory-442.html

Check your stack JSON