Directory Traversal

AjaxControlToolkit is vulnerable to a directory traversal. A GUID fileId containing a temporary path is generated when a file is uploaded. This GUID is not validated and allows an attacker to modify the path to contain ../ characters and write the uploaded file to arbitrary locations on the file...

CVE-2015-4670 - AjaxControlToolkit File Upload Directory Traversal

The AjaxControlToolkit prior to version 15.1 has a file upload directory traversal vulnerability which on a poorly configured web server can lead to remote code execution. The issue affects any application using the AjaxFileUpload control. The vulnerability arises because the...