Description
The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to obtain sensitive information by uploading a file, which reveals the path in a success message.
References
- 20040923 Multiple vulnerabilities in ActivePost Standard 3.1 mailing-list
- http://aluigi.altervista.org/adv/actp-adv.txt
- 20040923 Multiple vulnerabilities in ActivePost Standard 3.1 mailing-list
- 10235 vdb-entry
- 1011406 vdb-entry