Description
Unrestricted file upload vulnerability in uploadrequest.asp in Layton HelpBox 3.7.1 allows remote authenticated users to upload and execute arbitrary ASP files, related to not properly checking file extensions.
References
- http://secunia.com/secunia_research/2007-94/advisory/
- helpbox-uploadrequest-file-upload(39536) vdb-entry
- 27187 vdb-entry
- 27699 third-party-advisory