Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Hosting Controller

First CVE: May 16, 2002Active for: 24 yearsTotal CVEs: 39
48.2
VTI Score
High

Hosting Controller is a narrowly scoped hosting and server management platform whose small but recurring vulnerability footprint reflects the complexity of administrative interfaces managing distributed infrastructure. The vendor's disclosures cluster around a single flagship product, Hosting Controller and its HC10 variant, and recur through weakness classes including SQL injection, improper input validation, and exposure of sensitive information—patterns typical of web-facing administrative tooling. Notably, vulnerabilities affecting this vendor frequently acquire public exploit code, consistent with the appeal of administrative control planes as targets for post-compromise lateral movement and persistence. Defenders managing Hosting Controller instances should prioritize timely patching and restrict administrative access to trusted networks; live severity and current exploitation activity are shown alongside this summary.

FAUCET AI Generated
39
Total CVEs
More Total CVEs than 98% of tracked vendors
3.9
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 99% of tracked vendors
6.6
Avg CVSS Score
Higher Avg CVSS Score than 41% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Hosting Controller over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 16, 2002
24 years ago
Most Recent CVE
Jun 24, 2019
2,587 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (39 CVEs).

39 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2007-6494HIGH
Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via a request to hosting/addreseller.asp with a username in the reseller parameter, fo
Dec 20, 200710.040NOYES
CVE-2019-12323HIGH
The HC.Server service in Hosting Controller HC10 10.14 allows an Invalid Pointer Write DoS.
Jun 24, 20197.539NOYES
CVE-2002-0773HIGH
imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters su
Aug 12, 200210.036NOYES
CVE-2002-0775MEDIUM
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.
Aug 12, 20025.031NOYES
CVE-2005-1784HIGH
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for Us
May 27, 20057.530NOYES
CVE-2007-6497HIGH
Hosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and em
Dec 20, 20077.529NOYES
CVE-2006-5629HIGH
Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute arbitrary SQL commands via the ForumID parameter in (1) Disable
Oct 31, 20067.529NOYES
CVE-2002-0772MEDIUM
Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parame
Aug 12, 20026.429NOYES
CVE-2007-6498HIGH
Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) email and (2
Dec 20, 20077.528NOYES
CVE-2005-1788HIGH
SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter.
Jun 1, 20057.528NOYES
View all 39 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products39 CVEs
59%
41%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network1 (2.6%)
Unknown38 (97.4%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (2.6%)
High0 (0.0%)
Unknown38 (97.4%)
User Interaction
None1 (2.6%)
Unknown38 (97.4%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (2.6%)
Unknown38 (97.4%)

Exploit Exposure

Signals from CVEs in this vendor scope (39 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
24 CVEs
61.5% of CVEs· 83rd percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Hosting Controller.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Hosting Controller — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Hosting Controller's Products

View all 1 CNAs →

Top CWEs