CVE-2006-6814

Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authenticated users to read and modify arbitrary files, and list arbitrary directories via ..\ (dot dot backslash) sequences in the BrowsePath parameter.

CVSS v2.0

6.3 MEDIUMAV:N/AC:M/Au:S/C:C/I:N/A:N

EPSS

2.04% chance of exploitation in the next 30 days, 80th percentile

Published

2006-12-29

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/29357

References

• CVE Record
• NVD entry

Related

• CVE-2006-6813
• CVE-2006-6816
• CVE-2006-6812
• CVE-2006-6819
• CVE-2006-6811
• CVE-2006-6820