This question is locked. New answers and comments are not allowed.
browniepoints
Top achievements
Rank 2
Rank 2
browniepoints
asked on 10 Apr 2010, 03:21 PM
If you're using the upload component, please make sure that the folder you use for uploading (if it's underneath your application) does not have execute or execute script privileges. Otherwise, a user can upload an aspx file and execute it as part of your app.
1 Answer, 1 is accepted
0
browniepoints
Top achievements
Rank 2
Rank 2
answered on 10 Apr 2010, 03:35 PM
BTW this isn't a risk with only the Telerik upload component but it should be considered whenever you accept uploads into your software.