CVE-2006-3147 json
Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privil…
published 2006-06-22 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-3144
- cvss
- 6.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.7%
- EPSS 2.7% chance of exploitation in 30 days, percentile 85%
- public exploits
- 1
- Exploit-DB
Summary
Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is related to a previously disclosed issue such as CVE-2005-1788.
Patch / fix
Timeline
- Published
- First public exploit (EDB-1987)
Exploit prediction
2.67% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-1987 Hosting Controller 6.1 Hotfix 3.1 - Privilege Escalation webapps, 2006-07-06
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P |
References
-
secunia.com
/advisories/20743
third-party-advisory, patch, vendor-advisory
-
hostingcontroller.com
/english/logs/hotfixlogv61_3_2.html
patch
-
securitytracker.com
/id?1016444
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/27340
vdb-entry
-
securityfocus.com
/bid/18565
vdb-entry
-
osvdb.org
/26693
vdb-entry
-
vupen.com
/english/advisories/2006/2459
vdb-entry
Sources
- CVE List CVE-2006-3147
- NVD CVE-2006-3147
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.