Security Advisory

CVE-2006-6865

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2007-01-04 22:00:00
Last updated 2024-08-07 20:42:07
Assigner mitre
State PUBLISHED

Description

Directory traversal vulnerability in SAFileUpSamples/util/viewsrc.asp in SoftArtisans FileUp (SAFileUp) 5.0.14 allows remote attackers to read arbitrary files via a %c0%ae. (Unicode dot dot) in the path parameter, which bypasses the checks for ".." sequences.