medium5.0Public exploit code
CVE-2002-0775
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hosting Controller 1.x - 'Browse.asp' File Disclosure2002-05-19 · webapps · asp · Verified
Impact
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hosting Controller | Hosting Controller | Versions 1.1, 1.3, 1.4, 1.4.1, 1.4b |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0168.html
- http://hostingcontroller.com/english/logs/sp2log.html
- http://www.hostingcontroller.com/english/patches/ForAll/download/drivebrowse.zip
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0168.html
- http://hostingcontroller.com/english/logs/sp2log.html
- http://www.hostingcontroller.com/english/patches/ForAll/download/drivebrowse.zip