| Package | Affected versions | Patched versions |
|---|---|---|
| hosting controller | = 6.1= 6.1_hotfix_1.4 |
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to (1) Statsbrowse.asp or (2) Generalbrowse.asp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free