Lucene search

CVE-2014-1827

🗓️ 26 Mar 2014 10:05:55Reported by mitreType

cve🔗 web.nvd.nist.gov👁 28 Views🌐 WEB

The iThoughtsHD app 4.19 for iOS on iPad devices allows remote attackers to upload arbitrary files

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2014-1827	26 Mar 201410:55	–	nvd
Cvelist	CVE-2014-1827	26 Mar 201410:00	–	cvelist
Prion	Design/Logic Flaw	26 Mar 201410:55	–	prion
seebug.org	iThoughtsHD任意文件上传漏洞	27 Mar 201400:00	–	seebug
Packet Storm	iThoughtsHD 4.19 DoS / XSS / File Upload	25 Mar 201400:00	–	packetstorm

Nvd

Node

ithoughts ithoughtshdMatch4.19iphone_osipad

Source	Link
madirish	www.madirish.net/559

Parameter	Position	Path	Description	CWE
file	binary	/upload	Allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension.	CWE-20

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Mar 2014 10:55Current

6.7Medium risk

Vulners AI Score6.7

CVSS24.3

EPSS0.00243

CWE-20