CVE-2004-0059 Information

Description

Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in the filename parameter of a Content-Disposition: header.

Reference

http://marc.info/?l=bugtraq&m=107411794303201&w=2 http://www.securitytracker.com/id?1008779

Share on: