Unscored CVE-2004-2380 EUVD-2004-2372GHSA-r9xj-fhjq-6rqm

Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to write arbitrary file…

Published Aug 16, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to write arbitrary files via a .. (dot dot) in the attfile parameter.

References

http://members.lycos.co.uk/r34ct/main/TW-webserver/TWwebserver.txt
1009443 vdb-entry
twilight-postfile-create-file(15523) vdb-entry