| Reporter | Title | Published | Views | Family All 18 |
|---|---|---|---|---|
 | DriverFileUploadServlet File Deletion | 18 Aug 201700:00 | – | bdu_fstec |
| FileUploadController Code Execution | 18 Aug 201700:00 | – | bdu_fstec |
| FileUploadController Code Execution | 18 Aug 201700:00 | – | bdu_fstec |
| FileUploadController Code Execution | 18 Aug 201700:00 | – | bdu_fstec |
| DriverFileUploadServlet Code Execution | 18 Aug 201700:00 | – | bdu_fstec |
| AddDriverFileServlet File Deletion | 18 Aug 201700:00 | – | bdu_fstec |
 | Samsung SyncThru Directory Traversal Vulnerability | 22 Jul 201500:00 | – | cnvd |
 | CVE-2015-5473 | 1 Jun 201716:00 | – | cvelist |
 | CVE-2015-5473 | 1 Jun 201716:29 | – | nvd |
 | Directory traversal | 1 Jun 201716:29 | – | prion |
10
Node
| Source | Link |
|---|---|
| zerodayinitiative | www.zerodayinitiative.com/advisories/ZDI-15-300 |
| zerodayinitiative | www.zerodayinitiative.com/advisories/ZDI-15-301 |
| zerodayinitiative | www.zerodayinitiative.com/advisories/ZDI-15-299 |
| zerodayinitiative | www.zerodayinitiative.com/advisories/ZDI-15-298 |
| zerodayinitiative | www.zerodayinitiative.com/advisories/ZDI-15-297 |
| securityfocus | www.securityfocus.com/bid/75912 |
| zerodayinitiative | www.zerodayinitiative.com/advisories/ZDI-15-296 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| unspecified parameters | request body | /upload/updateDriver | Directory traversal vulnerability in the updateDriver endpoint allowing remote attackers to delete arbitrary files. | CWE-22 |
| unspecified parameters | request body | /upload/addDriver | Directory traversal vulnerability in the addDriver endpoint allowing remote attackers to delete arbitrary files. | CWE-22 |
| unspecified parameters | request body | /uploadCloning.html | Directory traversal vulnerability in uploadCloning.html allowing remote attackers to execute arbitrary code with SYSTEM privileges. | CWE-22 |
| unspecified parameters | request body | /fileupload.html | Directory traversal vulnerability in fileupload.html allowing remote attackers to execute arbitrary code with SYSTEM privileges. | CWE-22 |
| unspecified parameters | request body | /uploadFirmware.html | Directory traversal vulnerability in uploadFirmware.html allowing remote attackers to execute arbitrary code with SYSTEM privileges. | CWE-22 |
| unspecified parameters | request body | /upload/driver | Directory traversal vulnerability in the upload/driver endpoint allowing remote attackers to execute arbitrary code with SYSTEM privileges. | CWE-22 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 00:29Current
9.8Critical risk
Vulners AI Score9.8
CVSS 39.8
CVSS 210
EPSS0.12633