Directory traversal

2009-10-1310:30:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.901 High

EPSS

Percentile

98.8%

JSON

Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control (XUpload.ocx) in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via .. (backwards slash dot dot) sequences in the third argument to the MakeHttpRequest method.

CPENameOperatorVersion
loadrunnereq9.5
xuploadeq2.0

CPE	Name	Operator	Version
	loadrunner	eq	9.5
	xupload	eq	2.0

References

retrogod.altervista.org/9sg_hp_loadrunner.html

secunia.com/advisories/36898