Lucene search
PRIOn knowledge basePRION:CVE-2018-12939HistoryJul 31, 2018 - 2:29 p.m.
Directory traversal
2018-07-3114:29:00
PRIOn knowledge base
www.prio-n.com
6
A directory traversal flaw in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows an authenticated attacker to write to (or potentially delete) arbitrary files via a … (dot dot) in the “op/op.UploadChunks.php” “qquuid” parameter. NOTE: this can be leveraged to execute arbitrary code by using CVE-2018-12940.
Related
cvelist
cvelist
cve
cve
nvd
nvd
prion
prion
Unrestricted file upload
2018-07-31 14:29:00
Design/Logic Flaw
2019-06-20 17:15:00