Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2014-1222
HistoryAug 12, 2014 - 11:55 p.m.

Directory traversal

2014-08-1223:55:00
PRIOn knowledge base
www.prio-n.com
1

6.5 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.043 Low

EPSS

Percentile

92.1%

JSON

Directory traversal vulnerability in kcfinder/browse.php in Vtiger CRM before 6.0.0 Security patch 1 allows remote authenticated users to read arbitrary files via a โ€ฆ (dot dot) in the file parameter in a download action. NOTE: it is likely that this issue is actually in the KCFinder third-party component, and it affects additional products besides Vtiger CRM.

CPENameOperatorVersion
vtiger_crmle6.0.0

Related

cve 1
seebug 1
zdt 1
dsquare 1
securityvulns 2
exploitpack 2
packetstorm 2
openvas 1
exploitdb 2
cve
cve
CVE-2014-1222
2014-08-12 23:55:00
seebug
seebug
Vtiger CRMๆ–‡ไปถๅŒ…ๅซๆผๆดž
2014-03-13 00:00:00
zdt
zdt
Vtiger CRM 5.4.0, 6.0 RC, 6.0.0 GA - Local File Inclusion Vulnerability
2014-03-12 00:00:00
dsquare
dsquare
vTiger CRM 5.4.0 kcfinder LFI
2014-04-02 00:00:00
securityvulns
securityvulns
CVE-2014-1222 - Local File Inclusion in Vtiger CRM
2014-05-05 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-05-05 00:00:00
exploitpack
exploitpack
vTiger CRM 5.4.06.0 RC6.0.0 GA - browse.php Local File Inclusion
2014-03-12 00:00:00
Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities
2015-03-31 00:00:00
packetstorm
packetstorm
Vtiger CRM 5.4.0 / 6.0 RC / 6.0.0 GA Local File Inclusion
2014-03-12 00:00:00
FiyoCMS 2.0.1.8 XSS / SQL Injection / URL Bypass
2015-03-30 00:00:00
openvas
openvas
vTiger CRM 'file' Arbitrary File Disclosure Vulnerability
2014-08-25 00:00:00
exploitdb
exploitdb
vTiger CRM 5.4.0/6.0 RC/6.0.0 GA - 'browse.php' Local File Inclusion
2014-03-12 00:00:00
Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities
2015-03-31 00:00:00

6.5 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.043 Low

EPSS

Percentile

92.1%

JSON
Related for PRION:CVE-2014-1222
cve1seebug1zdt1dsquare1securityvulns2exploitpack2packetstorm2openvas1exploitdb2