NVD

Id
30682  
Name
CVE-2014-2217  
Description
Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via a full pathname in the UploadID metadata value.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-12-25  
Modified Date
2014-12-29  
Seq
2014-2217  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161763 30682 CVE-2014-2217 http://itq.nl/arbitrary-file-write-in-telerik-ui-for-asp-net-ajax/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18540 JVNDB-2014-007415 Telerik UI for ASP.NET AJAX の RadControls の RadAsyncUpload 制御における絶対パストラバーサルの脆弱性 Telerik UI for ASP.NET AJAX の RadControls の RadAsyncUpload 制御には、絶対パストラバーサルの脆弱性が存在します。 CVE-2014-2217 69504 CVE-2014-2217 30682 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007415.html 2014-03-07 2015-01-05 View