Lucene search
Veracode Vulnerability DatabaseVERACODE:6986HistoryJul 09, 2018 - 2:38 a.m.
Directory Traversal
2018-07-0902:38:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.004 Low
EPSS
Percentile
73.5%
AjaxControlToolkit is vulnerable to a directory traversal. A GUID fileId containing a temporary path is generated when a file is uploaded. This GUID is not validated and allows an attacker to modify the path to contain ../ characters and write the uploaded file to arbitrary locations on the file system, which could lead to remote code execution if a .aspx file is written to a web directory.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ajaxcontroltoolkit | le | 8.0.0 |
Related
nvd
nvd
CVE-2015-4670
2015-08-18 17:59:10
cvelist
cvelist
CVE-2015-4670
2015-08-18 17:00:00
cve
cve
CVE-2015-4670
2015-08-18 17:59:10
securityvulns
securityvulns
CVE-2015-4670 - AjaxControlToolkit File Upload Directory Traversal
2015-07-14 00:00:00
prion
prion
Directory traversal
2015-08-18 17:59:00
thn
thn
Warning: Citrix ShareFile Flaw Could Let Attackers Steal Corporate Secrets
2020-05-05 14:00:00