CVE-2014-9581 in Codiadinfo

Summary

Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter. NOTE: this issue was originally incorrectly mapped to CVE-2014-1137; see CVE-2014-1137 for more information.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

01/08/2015

Disclosure

01/08/2015

Entries

1

CPE

ready

CWE

CWE-22

Exploit

Download

CVSS

5.3

EPSS

0.11619

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2014-9581
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2014-9581
CVE Detailshttps://www.cvedetails.com/cve/CVE-2014-9581/

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!