Actually This is because of changes in W3C the real path to the file will be shown only if the page that contains the control is added to the trusted sites collection of the browser
solution for internet explorer
Go to tools ->internet options->security->trusted sites->sites->Enter
http://localhost ->click add and
uncheck require https
solution for firefox>h4>
Go to tools->options->security->Exceptions->add the site http://localhost as trusted site
Now you get the exact values in the upload attribute.?