6.4
CVSSv2

CVE-2001-0938

Published: 30/11/2001 Updated: 18/10/2016
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote malicious users to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp.

Vulnerable Product Search on Vulmon Subscribe to Product

persits aspupload 2.1