Lucene search
+L

5 matches found

NVD
NVD
•added 2014/11/20 1:55 p.m.•26 views

CVE-2014-8997

Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/...

7.5CVSS7.7AI score0.09133EPSS
SaveExploits2References3
Prion
Prion
•added 2014/11/20 1:55 p.m.•21 views

Unrestricted file upload

Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/...

7.5CVSS8.2AI score0.09133EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2014/11/20 11:00 a.m.•38 views

CVE-2014-8997

Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/...

7.7AI score0.09133EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2014/11/20 12:00 a.m.•6 views

PT-2014-8776

Name of the Vulnerable Software and Affected Versions DigitalVidhya Digi Online Examination System version 2.0 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the Photo functionality, then accessing it via a direct reques...

7.5CVSS0.09133EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/11/20 12:00 a.m.•12 views

CVE-2014-8997: Improper Control of Generation of Code

Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/...

7.5CVSS6.5AI score0.09133EPSS
SaveExploits2References2
Rows per page
Query Builder