335 matches found
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1696.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1697.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1699.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1695.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1694.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1698.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1692.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1700.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1693.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
The Hosting Controller application resides on this server. This version is vulnerable to multiple remote exploits. At attacker may make use of this vulnerability and use it to gain access to confidential data and/or escalate their privileges on the Web server. %NASLMINLEVEL 70300 This script was...
CVE-2002-0464
Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. dot dot in arguments to 1 fileeditor.asp, 2 folderactions.asp, or 3 editoractions.asp...
CVE-2002-0776
getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix...
CVE-2002-0464
CVE-2002-0464 affects Hosting Controller 1.4.1 and earlier. A directory-traversal vulnerability allows remote attackers to read and modify arbitrary files and directories by supplying a ".." in arguments to the vulnerable endpoints: file_editor.asp, folderactions.asp, or editoractions.asp. The in...
CVE-2002-0776
CVE-2002-0776 affects Hosting Controller 2002. getuserdesc.asp lets remote attackers change arbitrary users’ passwords and gain privileges by modifying the username parameter. Root cause is input manipulation in the affected function, leading to partial confidentiality, integrity and availability...
CVE-2002-0464: Undefined Security Weakness
Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. dot dot in arguments to 1 fileeditor.asp, 2 folderactions.asp, or 3 editoractions.asp...
CVE-2002-0776: Undefined Security Weakness
getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix...
CVE-2002-0466
Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to 1 Statsbrowse.asp, 2 servubrowse.asp, 3 browsedisk.asp, 4 browsewebalizerexe.asp, or 5 sqlbrowse.asp...
CVE-2002-0464
Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. dot dot in arguments to 1 fileeditor.asp, 2 folderactions.asp, or 3 editoractions.asp...
CVE-2002-0465
Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. dot dot in the OpenPath parameter...