CVE-2002-0464

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-08-12 · updated 2026-06-16

Description

Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. (dot dot) in arguments to (1) file_editor.asp, (2) folderactions.asp, or (3) editoractions.asp.

Affected products

Hosting Controller: 1.4, 1.4.1

References

http://www.hostingcontroller.com/english/patches/ForAll/download/dot-slash.zip
http://www.securityfocus.com/archive/1/262734
http://www.securityfocus.com/bid/4311
http://www.hostingcontroller.com/english/patches/ForAll/download/dot-slash.zip
http://www.securityfocus.com/archive/1/262734
http://www.securityfocus.com/bid/4311

Get alerted when CVE-2002-0464 or the next vulnerability affects your stack