Description
Directory traversal vulnerability in admin/folders/saveuploadfiles.asp in Hosting Controller 2002 RC 1 allows remote authenticated users to overwrite arbitrary files via an absolute path in the OpenPath parameter.
References
- hosting-controller-Saveupload-file-upload(25675) vdb-entry
- 20060402 Hosting Controller AccountActions.asp and saveuploadfiles.asp vulns (PoC) mailing-list
- 24772 vdb-entry