CVE-2002-0465: Hosting Controller

High severity, CVSS 10.0. EPSS: 4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. (dot dot) in the OpenPath parameter.

Affected products

• Hosting Controller Hosting Controller: version 1.4 only; version 1.4.1 only

Published 2002-08-12. Last modified 2026-06-16.