CVE-2018-6617 Easy Hosting Control Panel (EHCP) v0.37.12.b, when using a local MySQL server, allows attackers to change passwords of arbitrary database users by leveraging failure to ask for the current password.
HighCVSS 7.8
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Easy Hosting Control Panel (EHCP) v0.37.12.b, when using a local MySQL server, allows attackers to change passwords of arbitrary database users by leveraging failure to ask for the current password.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ehcp easy hosting control panel | = 0.37.12.b | No fix listed |
References
- hyp3rlinx.altervista.org exploit third-party-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry