Unscored CVE-2003-1501 EUVD-2003-1491GHSA-w27h-rqjh-6c8p

Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrary files via a .. (do…

Published Oct 25, 2007 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrary files via a .. (dot dot) in the req_file parameter.

References

20031020 Gast Arbeiter Privilege Escalation mailing-list
gast-arbeiter-file-upload(13469) vdb-entry
8858 vdb-entry