CVE-2004-1217

Hosting Controller <6.1.4 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-1217. PoCs published by Mouse.

AI-analyzed exploit summary This advisory describes a directory traversal vulnerability in Hosting Controller, allowing attackers to browse arbitrary files and directories on the server via manipulated URLs in Statsbrowse.asp and Generalbrowse.asp.

Description

Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to (1) Statsbrowse.asp or (2) Generalbrowse.asp.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Mouse · textremotewindows
https://www.exploit-db.com/exploits/675

This advisory describes a directory traversal vulnerability in Hosting Controller, allowing attackers to browse arbitrary files and directories on the server via manipulated URLs in Statsbrowse.asp and Generalbrowse.asp.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Hosting Controller (Tested on v.6.1 Hotfix 1.4)
Auth required
Prerequisites: Valid credentials to access the admin interface
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11822
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=110237762807764&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18363

Scores

EPSS 0.0291
EPSS Percentile 85.2%

Details

Status published
Products (2)
hosting_controller/hosting_controller 6.1
hosting_controller/hosting_controller 6.1_hotfix_1.4
Published Jan 10, 2005
Tracked Since Feb 18, 2026