Description
Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upload arbitrary files via a .. (dot dot) in the filename.
References
- activepost-dotdot-directory-traversal(17488) vdb-entry
- 20040923 Multiple vulnerabilities in ActivePost Standard 3.1 mailing-list
- 12642 third-party-advisory
- http://aluigi.altervista.org/adv/actp-adv.txt
- 11244 vdb-entry
- 1011406 vdb-entry