CVE-2004-1217 Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to (1) Statsbrowse.asp...
MediumCVSS 5.0
EPSS 2.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to (1) Statsbrowse.asp or (2) Generalbrowse.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hosting controller | = 6.1 | No fix listed |
| hosting controller | = 6.1_hotfix_1.4 | No fix listed |
References
- 20041205 Hosting Controller mailing-list
- 11822 exploit vdb-entry vendor-advisory
- hosting-controller-view-files(18363) vdb-entry