Unspecified vulnerability in Hosting Controller 6.1 before Hotfix 2.4 allows remote attackers to list and read contents of arbitrary drives, related to "the PHP vulnerability."
http://www.securityfocus.com/bid/14840
http://secunia.com/advisories/16824
http://hostingcontroller.com/english/logs/hotfixlogv61_2_4.html