Vulnerabilities (CVE)

Filtered by vendor Persits Subscribe
Filtered by product Aspupload
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0938 1 Persits 1 Aspupload 2024-02-04 6.4 MEDIUM N/A
Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp.
CVE-1999-1535 1 Persits 1 Aspupload 2024-02-04 10.0 HIGH N/A
Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument in the HTTP request.