CVE-2004-1217

Published: Jan 10, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to (1) Statsbrowse.asp or (2) Generalbrowse.asp.

Affected (2)

Products: Hosting Controller: Hosting Controller

Hosting Controller

1 product

Hosting Controller

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Hosting Controller Hosting Controller	Version 6.1
Hosting Controller Hosting Controller	Version 6.1_hotfix_1.4

References (6)

http://marc.info/?l=bugtraq&m=110237762807764&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/11822

Source: cve@mitre.org

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18363

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110237762807764&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/11822

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18363

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.