Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to (1) Statsbrowse.asp or (2) Generalbrowse.asp.
Metrics
Affected Vendors & Products
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published: 2004-12-15T05:00:00.000Z
Updated: 2024-08-08T00:46:12.316Z
Reserved: 2004-12-14T00:00:00.000Z
Link: CVE-2004-1217
No data.
Status : Modified
Published: 2005-01-10T05:00:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2004-1217
No data.