Description
eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitrary files by reading password.txt.
References
- 20020730 Bug in Eupload mailing-list
- 5369 vdb-entry
- eupload-passwordtxt-overwrite-files(9733) vdb-entry