Every CVE Search/ Get API key

CVE-2002-0775

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by...

5.0 MediumPublic exploit

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.

Exploit likelihood

8.26%Up 4.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.

Record
CVE-2002-0775
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.

Record
CVE-2002-0775
Updated
2026-11-02
EUVDEUVD-2002-0767 No score

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.

Record
EUVD-2002-0767
Updated
2026-11-03
GitHub AdvisoriesGHSA-2mx7-9ww8-vf6w No score

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by...

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.

Record
GHSA-2mx7-9ww8-vf6w
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBHosting Controller 1.x - 'Browse.asp' File Disclosure2002-05-19

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-0775 is a medium vulnerability (CVSS 5.0) in Hosting Controller Controller, published July 26, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.26%, the 94th percentile. No source names a fixed version.

References

MoveEnter Open