SoftArtisans FileUp Viewsrc.ASP目录遍历漏洞

SoftArtisans FileUp是一款基于ASP的WEB应用程序。 SoftArtisans FileUp不正确过滤用户提交的输入，远程攻击者可以利用漏洞上传任意脚本以WEB权限查看系统文件内容。 问题是'Viewsrc.asp'脚本对用户提交的WEB参数缺少过滤，提交类似'%c0%ae./'编码的数据作为参数，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 SoftArtisans FileUp 5.0.14 目前没有解决方案提供： http://www.componentsource.com/publishersite.asp?p=511435%2F15054...

SoftArtisans SAFileUp 5.0.14 - viewsrc.asp Script Source Disclosure

SoftArtisans SAFileUp 5.0.14 - viewsrc.asp Script Source Disclosure SoftArtisans FileUp viewsrc.asp remote script source disclosure exploit Advisory Name: SoftArtisans FileUpTM viewsrc.asp remote script source disclosure exploit Tested and Confirmed Vulerable: SoftArtisans SAFileUpTM 5.0.14...

SoftArtisans SAFileUp 5.0.14 - 'viewsrc.asp' Script Source Disclosure

SoftArtisans FileUp viewsrc.asp remote script source disclosure exploit Advisory Name: SoftArtisans FileUpTM viewsrc.asp remote script source disclosure exploit Tested and Confirmed Vulerable: SoftArtisans SAFileUpTM 5.0.14 Standard Severity: High Type: Script source disclosure From where: Remote...