CVE-2006-1621 - Directory traversal vulnerability in admin/folders/saveuploadfiles.asp in Hosting Controller 2002 RC 1 allows remote authenticated users to overwrite arbitrary files via an absolute path in the OpenPath parameter

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in admin/folders/saveuploadfiles.asp in Hosting Controller 2002 RC 1 allows remote authenticated users to overwrite arbitrary files via an absolute path in the OpenPath parameter

Published Apr 5, 2006

4.0

MEDIUM

CVSS 2.0

EPSS 1.34%

Description

Directory traversal vulnerability in admin/folders/saveuploadfiles.asp in Hosting Controller 2002 RC 1 allows remote authenticated users to overwrite arbitrary files via an absolute path in the OpenPath parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://www.osvdb.org/24772
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/429731/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1622
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25675
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.osvdb.org/24772		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/429731/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1622		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25675		vdb-entryx_refsource_XF