CVE-2004-1217: Hosting Controller

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to (1) Statsbrowse.asp or (2) Generalbrowse.asp.

Affected products

• Hosting Controller Hosting Controller: version 6.1 only; version 6.1_hotfix_1.4 only

Published 2005-01-10. Last modified 2026-06-16.