CVE-2015-4670: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the AjaxFileUpload control in DevExpress AJAX Control Toolkit aka AjaxControlToolkit before 15.1 allows remote attackers to write to arbitrary files via a .. dot dot in the fileId parameter to AjaxFileUploadHandler.axd...

PT-2015-6664

Name of the Vulnerable Software and Affected Versions DevExpress AJAX Control Toolkit versions prior to 15.1 Description The issue allows remote attackers to write to arbitrary files via a .. dot dot in the fileId parameter to "AjaxFileUploadHandler.axd" API endpoint. Recommendations For versions...

DevExpress 13.2.8 /FileManagerComponent.aspx 目录穿越漏洞

No description provided by source...

DevExpress ASPxFileManager 10.2 to 13.2.8 - Directory Traversal

No description provided by source...

[RT-SA-2014-006] Directory Traversal in DevExpress ASP.NET File Manager

Advisory: Directory Traversal in DevExpress ASP.NET File Manager During a penetration test RedTeam Pentesting discovered a directory traversal vulnerability in DevExpress' ASP.NET File Manager and File Upload. Attackers are able to read arbitrary files by specifying a relative path. Details =====...

DevExpress ASPxFileManager 10.2 to 13.2.8 - Directory Traversal

Exploit for asp platform in category web applications Directory Traversal in DevExpress ASP.NET File Manager During a penetration test RedTeam Pentesting discovered a directory traversal vulnerability in DevExpress' ASP.NET File Manager and File Upload. Attackers are able to read arbitrary files ...

DevExpress ASPxFileManager 10.2 13.2.8 - Directory Traversal

DevExpress ASPxFileManager 10.2 13.2.8 - Directory Traversal Advisory: Directory Traversal in DevExpress ASP.NET File Manager During a penetration test RedTeam Pentesting discovered a directory traversal vulnerability in DevExpress' ASP.NET File Manager and File Upload. Attackers are able to read...

DevExpress ASPxFileManager 10.2 < 13.2.8 - Directory Traversal

Advisory: Directory Traversal in DevExpress ASP.NET File Manager During a penetration test RedTeam Pentesting discovered a directory traversal vulnerability in DevExpress' ASP.NET File Manager and File Upload. Attackers are able to read arbitrary files by specifying a relative path. Details =====...

CVE-2014-2575

Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC before 13.1.10 and 13.2.x before 13.2.9 allows remote authenticated users to read or write arbitrary files via a .. dot dot in the EVENTARGUMENT parameter...

Directory traversal

Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC before 13.1.10 and 13.2.x before 13.2.9 allows remote authenticated users to read or write arbitrary files via a .. dot dot in the EVENTARGUMENT parameter...

CVE-2014-2575

The CVE-2014-2575 entry concerns DevExpress ASPxFileManager for WebForms and MVC. A directory traversal vulnerability allows remote authenticated users to read or write arbitrary files by supplying a relative path in __EVENTARGUMENT, affecting DevExpress ASPxFileManager versions up to 13.2.8 (and...

CVE-2014-2575

Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC before 13.1.10 and 13.2.x before 13.2.9 allows remote authenticated users to read or write arbitrary files via a .. dot dot in the EVENTARGUMENT parameter...

PT-2014-4787

Name of the Vulnerable Software and Affected Versions DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC versions prior to 13.1.10 DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC versions 13.2.x prior to 13.2.9 Description The issue allows remote authenticated users t...

DevExpress ASP.NET File Manager 13.2.8 Directory Traversal

DevExpress ASP.NET File Manager versions 10.2 through 13.2.8 suffer from a directory traversal vulnerability. Directory Traversal in DevExpress ASP.NET File Manager During a penetration test RedTeam Pentesting discovered a directory traversal vulnerability in DevExpress' ASP.NET File Manager and...

CVE-2014-2575: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC before 13.1.10 and 13.2.x before 13.2.9 allows remote authenticated users to read or write arbitrary files via a .. dot dot in the EVENTARGUMENT parameter...

DevExpress ASP.NET File Manager 13.2.8 Directory Traversal

Advisory: Directory Traversal in DevExpress ASP.NET File Manager During a penetration test RedTeam Pentesting discovered a directory traversal vulnerability in DevExpress' ASP.NET File Manager and File Upload. Attackers are able to read arbitrary files by specifying a relative path. Details =====...