info
discussion
exploit
solution
references
Hosting Controller Multiple Information Disclosure Vulnerabilities
An exploit is not required.
The following proof of concept is available:
http://www.example.com/admin/logs/HCDiskQuotaService.csv
Privacy Statement
Copyright 2010, SecurityFocus