CVE-2001-0938 Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Fil...
MediumCVSS 6.4
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| persits aspupload | = 2.1 | No fix listed |
References
- 20011130 Aspupload installs exploitable scripts mailing-list
- aspupload-upload-directory-traversal(7628) vdb-entry
- aspupload-directory-browsing-download(7629) vdb-entry
- 3608 vdb-entry