Back

CVE-2002-0772

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.

Published: Aug 12, 2002 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (5)

Vendor Product Version
hosting_controller hosting_controller 1.1
hosting_controller hosting_controller 1.3
hosting_controller hosting_controller 1.4
hosting_controller hosting_controller 1.4.1
hosting_controller hosting_controller 1.4b

GitHub Security Advisory GHSA-7676-43cm-ffjm

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote...

Risk Scores

CVSS Score 6.4 / 10
EPSS Score 9.24%

Top 5% most likely to be exploited

Threat Score 28.4 / 100

Data Sources

NVD EPSS GitHub