Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2014-1222
HistoryAug 12, 2014 - 11:55 p.m.

CVE-2014-1222

2014-08-1223:55:00
CWE-22
[email protected]
web.nvd.nist.gov
29
cve-2014-1222
vtiger crm
security patch
directory traversal
kcfinder
nvd

8.6 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.043 Low

EPSS

Percentile

92.2%

JSON

Directory traversal vulnerability in kcfinder/browse.php in Vtiger CRM before 6.0.0 Security patch 1 allows remote authenticated users to read arbitrary files via a โ€ฆ (dot dot) in the file parameter in a download action. NOTE: it is likely that this issue is actually in the KCFinder third-party component, and it affects additional products besides Vtiger CRM.

Related

exploitpack 2
seebug 1
zdt 1
dsquare 1
securityvulns 2
prion 1
packetstorm 2
openvas 1
exploitdb 2
exploitpack
exploitpack
vTiger CRM 5.4.06.0 RC6.0.0 GA - browse.php Local File Inclusion
2014-03-12 00:00:00
Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities
2015-03-31 00:00:00
seebug
seebug
Vtiger CRMๆ–‡ไปถๅŒ…ๅซๆผๆดž
2014-03-13 00:00:00
zdt
zdt
Vtiger CRM 5.4.0, 6.0 RC, 6.0.0 GA - Local File Inclusion Vulnerability
2014-03-12 00:00:00
dsquare
dsquare
vTiger CRM 5.4.0 kcfinder LFI
2014-04-02 00:00:00
securityvulns
securityvulns
CVE-2014-1222 - Local File Inclusion in Vtiger CRM
2014-05-05 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-05-05 00:00:00
prion
prion
Directory traversal
2014-08-12 23:55:00
packetstorm
packetstorm
Vtiger CRM 5.4.0 / 6.0 RC / 6.0.0 GA Local File Inclusion
2014-03-12 00:00:00
FiyoCMS 2.0.1.8 XSS / SQL Injection / URL Bypass
2015-03-30 00:00:00
openvas
openvas
vTiger CRM 'file' Arbitrary File Disclosure Vulnerability
2014-08-25 00:00:00
exploitdb
exploitdb
vTiger CRM 5.4.0/6.0 RC/6.0.0 GA - 'browse.php' Local File Inclusion
2014-03-12 00:00:00
Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities
2015-03-31 00:00:00

8.6 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.043 Low

EPSS

Percentile

92.2%

JSON
Related for CVE-2014-1222
exploitpack2seebug1zdt1dsquare1securityvulns2prion1packetstorm2openvas1exploitdb2