CVE-2002-0465 Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. (dot dot) in th...
HighCVSS 10.0
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. (dot dot) in the OpenPath parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hosting controller | = 1.4 | No fix listed |
| hosting controller | = 1.4.1 | No fix listed |
References
- 20020105 Hosting Controller's - Multiple Security Vulnerabilities mailing-list
- www.hostingcontroller.com
- 3811 exploit vdb-entry vendor-advisory
- hosting-controller-dot-directory-traversal(7824) vdb-entry