A vulnerability has been identified in Hosting Controller, which could be exploited by malicious users to gain unauthorized access to arbitrary files on a vulnerable system. This issue is due to an input validation error in the "FolderManager/FolderManager.aspx" script that does not validate the "BrowsePath" parameter, which could be exploited by authenticated attackers to access and modify the contents of arbitrary files via a directory traversal.
Vulnerable Products
Vulnerable Software: Hosting Controller version 7.00.0003 and prior
