2002-07-26 08:00:00
mitre
PUBLISHED
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.