CVE:CVE-2005-1784
CNNVD:CNNVD-200505-1217
Hosting Controller 6.1 HotFix 2.0及更早版本允许远程攻击者通过修改UserProfile.asp的updateprofile操作中的emailaddress参数来偷窃密码并获取权限。
solution:Upgrade hosting_controller hosting_controller to a higher version than 6.1_hotfix_2.0,and avoid the version (,6.1_hotfix_2.0]