NVD

Id
30400  
Name
CVE-2014-1836  
Description
Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_path parameter in a cancel action.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-07-01  
Modified Date
2015-07-02  
Seq
2014-1836  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
160850 30400 CVE-2014-1836 http://community.impresscms.org/modules/smartsection/item.php?itemid=675  View
160851 30400 CVE-2014-1836 20140203 [CVE-2014-1836] Arbitrary file deletion in ImpressCMS < 1.3.6 and two XSS issues  View
160852 30400 CVE-2014-1836 65279  View
160853 30400 CVE-2014-1836 https://github.com/pedrib/PoC/blob/master/generic/impresscms-1.3.5.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19214 JVNDB-2014-008091 ImpressCMS の htdocs/libraries/image-editor/image-edit.php における絶対パストラバーサルの脆弱性 ImpressCMS の htdocs/libraries/image-editor/image-edit.php には、絶対パストラバーサルの脆弱性が存在します。 CVE-2014-1836 69123 CVE-2014-1836 30400 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008091.html 2014-01-31 2015-07-03 View