medium5.0Public exploit code
CVE-2004-1217
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hosting Controller 0.6.1 Hotfix 1.4 - Directory Browsing2004-12-05 · remote · windows · Verified
Impact
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to (1) Statsbrowse.asp or (2) Generalbrowse.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hosting Controller | Hosting Controller | Versions 6.1, 6.1_hotfix_1.4 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110237762807764&w=2
- http://www.securityfocus.com/bid/11822
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18363
- http://marc.info/?l=bugtraq&m=110237762807764&w=2
- http://www.securityfocus.com/bid/11822
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18363