CVE-2001-0938: Persits Aspupload

Medium severity, CVSS 6.4. EPSS: 3.2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp.

Affected products

• Persits Aspupload: version 2.1 only

Published 2001-11-30. Last modified 2026-06-16.