medium6.3Public exploit code
CVE-2006-6814
Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authenticated users to read and modify arbitrary f…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hosting Controller 7C - 'FolderManager.aspx' Directory Traversal2006-12-27 · webapps · asp · Verified
Impact
Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authenticated users to read and modify arbitrary files, and list arbitrary directories via ..\ (dot dot backslash) sequences in the BrowsePath parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hosting Controller | Hosting Controller | Version 7c |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/23585
- http://securitytracker.com/id?1017447
- http://www.kapda.ir/advisory-458.html
- http://www.securityfocus.com/bid/21786
- http://www.vupen.com/english/advisories/2007/0023
- http://secunia.com/advisories/23585
- http://securitytracker.com/id?1017447
- http://www.kapda.ir/advisory-458.html
- http://www.securityfocus.com/bid/21786
- http://www.vupen.com/english/advisories/2007/0023