Description (CNA)
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to (1) Statsbrowse.asp or (2) Generalbrowse.asp.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/11822
- http://marc.info/?l=bugtraq&m=110237762807764&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18363
ADP enrichment
No English description supplied.