Description
Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp.
References
- 20011130 Aspupload installs exploitable scripts mailing-list
- aspupload-upload-directory-traversal(7628) vdb-entry
- aspupload-directory-browsing-download(7629) vdb-entry
- 3608 vdb-entry