www file share pro 5.30 insecure multiple

From: <output_at_email.it>
Date: 21 May 2008 20:27:44 -0000

('binary' encoding is not supported, stored as-is) this server that now has reached 5.30 per version still contains many elements of insecurity:

does not control the file extensions loaded
not figure the pass not esitone setting permits 666 777 etc.
Min poc:
http://gmda.altervista.org/wfsp530xpl/wfsp530exp.bat.txt
Received on May 21 2008