6.3
CVSSv2

CVE-2006-6814

Published: 29/12/2006 Updated: 08/03/2011
CVSS v2 Base Score: 6.3 | Impact Score: 6.9 | Exploitability Score: 6.8
VMScore: 635
Vector: AV:N/AC:M/Au:S/C:C/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authenticated users to read and modify arbitrary files, and list arbitrary directories via ..\ (dot dot backslash) sequences in the BrowsePath parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

hosting controller hosting controller 7c

Exploits

source: wwwsecurityfocuscom/bid/21786/info Hosting Controller is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input An attacker can exploit this issue to modify or retrieve arbitrary files in the context of the webserver process This may aid in further attacks This iss ...