Lucene search
RootSSV:61859HistoryMar 20, 2014 - 12:00 a.m.
SeedDMS '/op/op.AddFile2.php'任意文件上传漏洞
2014-03-2000:00:00
Root
www.seebug.org
28
0.068 Low
EPSS
Percentile
93.1%
Bugtraq ID:66255
CVE ID:CVE-2014-2278
SeedDMS是一个强大易用的文档管理系统。
SeedDMS /op/op.AddFile2.php上传功能不充分的访问控制，允许攻击者控制上传文件的位置，并上传任意文件类型的文件，以服务器上下文执行任意代码。
0
SeedDMS 4.3.3
SeedDMS 4.3.4已经修复该漏洞，建议用户下载更新：
https://sourceforge.net/projects/seeddms/files/seeddms-4.3.4/
Related
prion
prion
Directory traversal
2014-10-17 23:55:00
Unrestricted file upload
2014-10-17 23:55:00
cve
cve
CVE-2014-2279
2014-10-17 23:55:00
CVE-2014-2278
2014-10-17 23:55:00
packetstorm
packetstorm
SeedDMS XSS / Traversal / Shell Upload
2014-03-14 00:00:00
securityvulns
securityvulns
Multiple Vulnerabilities in SeedDMS < = 4.3.3
2014-05-05 00:00:00
zdt
zdt
SeedDMS XSS / Traversal / Shell Upload Vulnerabilities
2014-03-15 00:00:00