CVE

Id
69870  
CVE No.
CVE-2014-2575  
Status
Candidate  
Description
Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC before 13.1.10 and 13.2.x before 13.2.9 allows remote authenticated users to read or write arbitrary files via a .. (dot dot) in the __EVENTARGUMENT parameter.  
Phase
Assigned (20140321)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
667414 69870 CVE-2014-2575 BUGTRAQ:20140605 [RT-SA-2014-006] Directory Traversal in DevExpress ASP.NET File Manager  View
667415 69870 CVE-2014-2575 URL:http://www.securityfocus.com/archive/1/archive/1/532304/100/0/threaded  View
667416 69870 CVE-2014-2575 EXPLOIT-DB:33700  View
667417 69870 CVE-2014-2575 URL:http://www.exploit-db.com/exploits/33700  View
667418 69870 CVE-2014-2575 FULLDISC:20140605 [RT-SA-2014-006] Directory Traversal in DevExpress ASP.NET File Manager  View
667419 69870 CVE-2014-2575 URL:http://seclists.org/fulldisclosure/2014/Jun/24  View
667420 69870 CVE-2014-2575 MISC:https://www.redteam-pentesting.de/en/advisories/rt-sa-2014-006/-directory-traversal-in-devexpress-asp-net-file-manager  View
667421 69870 CVE-2014-2575 MISC:http://packetstormsecurity.com/files/126953/DevExpress-ASP.NET-File-Manager-13.2.8-Directory-Traversal.html  View
667422 69870 CVE-2014-2575 CONFIRM:http://security.devexpress.com/de7c4756/?id=ff8c1703126f4717993ac3608a65a2e2  View
667423 69870 CVE-2014-2575 BID:67902  View
667424 69870 CVE-2014-2575 URL:http://www.securityfocus.com/bid/67902  View
667425 69870 CVE-2014-2575 OSVDB:107742  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13092 JVNDB-2014-001967 Linux-PAM 用 pam_timestamp モジュールの pam_timestamp.c におけるディレクトリトラバーサルの脆弱性 Linux-PAM (別名 pam) 用 pam_timestamp モジュールの pam_timestamp.c には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2014-2583 69870 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001967.html  View