jetlib.sec » Penetration Testing » Re: Directory Traversal on File Upload

Feeds

133326 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Penetration Testing

• August 04, 2011
• 

  Re: Directory Traversal on File Upload

  Posted: August 4th, 2011, 6:16am PDT

  Tags:   

  Posted by mcleano on Aug 04

  In regards to the .htaccess suggestion, I tried uploading my own one with the
  following:
  
  AllowOverride All
  AddType application/x-httpd-php5 .htm .html .php .blog .comment .inc
  DirectoryIndex try.php
  Options +Indexes +MultiViews +FollowSymlinks
  allow from all
  
  but still no luck. I'm now questioning whether or not my file is actually
  being uploaded too (it might just be a bug in the code that always says the
  file has been uploaded). Even if...