CVE-2002-0773: Hosting Controller

High severity, CVSS 10.0. EPSS: 4.5% chance of exploitation in the next 30 days.

imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) owwwPath, and (3) oftpPath.

Affected products

• Hosting Controller Hosting Controller: version 1.1 only; version 1.3 only; version 1.4 only; version 1.4.1 only; version 1.4b only

Published 2002-08-12. Last modified 2026-06-16.