Description
Unrestricted file upload vulnerability in IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 allows remote authenticated users to execute arbitrary ASP.NET code by uploading a .aspx file, and then accessing it via unspecified vectors.
References
- 48967 third-party-advisory
- http://www.ibm.com/support/docview.wss?uid=swg21592188
- appscan-file-upload(74366) vdb-entry
- 48968 third-party-advisory
- 53247 vdb-entry