2002-07-26 04:00:00
mitre
PUBLISHED
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.