CVE-2002-0776

CVE-2002-0776 affects Hosting Controller 2002. getuserdesc.asp lets remote attackers change arbitrary users’ passwords and gain privileges by modifying the username parameter. Root cause is input manipulation in the affected function, leading to partial confidentiality, integrity and availability...

CVE-2002-0464

CVE-2002-0464 affects Hosting Controller 1.4.1 and earlier. A directory-traversal vulnerability allows remote attackers to read and modify arbitrary files and directories by supplying a ".." in arguments to the vulnerable endpoints: file_editor.asp, folderactions.asp, or editoractions.asp. The in...

CVE-2002-0776

getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix...

CVE-2002-0466

Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to 1 Statsbrowse.asp, 2 servubrowse.asp, 3 browsedisk.asp, 4 browsewebalizerexe.asp, or 5 sqlbrowse.asp...

CVE-2002-0464

Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. dot dot in arguments to 1 fileeditor.asp, 2 folderactions.asp, or 3 editoractions.asp...

CVE-2002-0776

getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix...

CVE-2002-0775

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter...

CVE-2002-0773

improotdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to improotdir.asp and modifying parameters such as 1 ftp, 2 owwwPath, and 3 oftpPath...

CVE-2002-0772

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. dot dot in the RootName parameter...

CVE-2002-0465

Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. dot dot in the OpenPath parameter...

CVE-2002-0772

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. dot dot in the RootName parameter...

CVE-2002-0774

CVE-2002-0774 affects Hosting Controller. A default user (AdvWebadmin) with a default password is created, enabling privilege escalation if the password is not changed. The available sources describe this risk but do not provide a patch/version detail or explicit exploitation status in the provid...

CVE-2002-0773

The CVE-2002-0773 entry describes a vulnerability in imp_rootdir.asp for Hosting Controller that enables remote attackers to copy or delete arbitrary files and directories by issuing a direct request to imp_rootdir.asp and altering parameters (1) ftp, (2) owwwPath, and (3) oftpPath). Affected sof...

CVE-2002-0775

CVE-2002-0775: The browse.asp component in Hosting Controller is vulnerable to a directory traversal flaw via the FilePath parameter, allowing remote attackers to view arbitrary directories. This affects the ability to access non-authorized file paths and partially impacts confidentiality. The do...

CVE-2002-0773

improotdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to improotdir.asp and modifying parameters such as 1 ftp, 2 owwwPath, and 3 oftpPath...

CVE-2002-0774

Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed...

CVE-2002-0772

CVE-2002-0772 describes a directory traversal vulnerability in the Hosting Controller’s dsnmanager.asp, exploitable via a .. payload in the RootName parameter to read arbitrary files. Affected component is the web interface/dsnmanager.asp; root cause is improper validation of the RootName input, ...

Hosting Controller Vulnerability

In Hosting Controller 2002, it is possible to change the password of any user, Administrator. To exploit this, one would have to: Add a user /accounts/getuserdesc.asp Edit the user, changing the password /accounts/updateuserdesc.asp Then using something like the @stake web proxy, change the hidde...

CVE-2002-0465

Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. dot dot in the OpenPath parameter...

CVE-2002-0465

Hosting Controller 1.4.1 and earlier are affected by CVE-2002-0465. A directory traversal flaw in filemanager.asp allows remote attackers to read/modify arbitrary files and execute commands via an open path parameter containing .. (dot dot). The issue is identified in the NVD/CVE records for this...