CVE-2006-6814
6.3
Vector
AV:N/AC:M/Au:S/C:C/I:N/A:N
Exploitability: 6.8 / Impact: 6.9
Source: NVD
Description
Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authenticated users to read and modify arbitrary files, and list arbitrary directories via ..\ (dot dot backslash) sequences in the BrowsePath parameter.
Affected (1)
Products: Hosting Controller: Hosting Controller
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7c |
References (10)
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.