Files
CVEs-PoC/2004/CVE-2004-0059.md
T
2024-06-18 02:51:15 +02:00

18 lines
703 B
Markdown

### [CVE-2004-0059](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0059)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in the filename parameter of a Content-Disposition: header.
### POC
#### Reference
- http://marc.info/?l=bugtraq&m=107411794303201&w=2
#### Github
No PoCs found on GitHub currently.