CVE

Id
69573  
CVE No.
CVE-2014-2278  
Status
Candidate  
Description
Unrestricted file upload vulnerability in op/op.AddFile2.php in SeedDMS (formerly LetoDMS and MyDMS) before 4.3.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension specified by the partitionIndex parameter and leveraging CVE-2014-2279.2 to access it via the directory specified by the fileId parameter.  
Phase
Assigned (20140304)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
665946 69573 CVE-2014-2278 BUGTRAQ:20140314 Multiple Vulnerabilities in SeedDMS < = 4.3.3  View
665947 69573 CVE-2014-2278 URL:http://archives.neohapsis.com/archives/bugtraq/2014-03/0101.html  View
665948 69573 CVE-2014-2278 MISC:http://packetstormsecurity.com/files/125726  View
665949 69573 CVE-2014-2278 CONFIRM:http://sourceforge.net/p/seeddms/code/ci/master/tree/CHANGELOG  View
665950 69573 CVE-2014-2278 OSVDB:104465  View
665951 69573 CVE-2014-2278 URL:http://osvdb.org/show/osvdb/104465  View
665952 69573 CVE-2014-2278 SECUNIA:57475  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13308 JVNDB-2014-002183 Asterisk Open Source および Certified Asterisk の main/http.c におけるサービス運用妨害 (DoS) の脆弱性 Asterisk Open Source および Certified Asterisk の main/http.c には、サービス運用妨害 (スタック消費) 状態にされる、および任意のコードを実行される脆弱性が存在します。 CVE-2014-2286 69573 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002183.html  View