EUVD-2004-1214

Malware in sbrugna...

CVE-2004-1217: Undefined Security Weakness

Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to 1 Statsbrowse.asp or 2 Generalbrowse.asp...

CVE-2002-0466: Undefined Security Weakness

Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to 1 Statsbrowse.asp, 2 servubrowse.asp, 3 browsedisk.asp, 4 browsewebalizerexe.asp, or 5 sqlbrowse.asp...