| Package | Affected versions | Patched versions |
|---|---|---|
| hosting controller | = 1.1= 1.3= 1.4= 1.4.1= 1.4b |
imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) owwwPath, and (3) oftpPath.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free