Total vulnerabilities in the database
imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) owwwPath, and (3) oftpPath.
| Software | From | Fixed in |
|---|---|---|
| hosting_controller / hosting_controller | 1.1 | 1.1.x |
| hosting_controller / hosting_controller | 1.3 | 1.3.x |
| hosting_controller / hosting_controller | 1.4b | 1.4b.x |
| hosting_controller / hosting_controller | 1.4.1 | 1.4.1.x |
| hosting_controller / hosting_controller | 1.4 | 1.4.x |