CVE-2014-2279

Multiple directory traversal vulnerabilities in SeedDMS (formerly LetoDMS and MyDMS) before 4.3.4 allow (1) remote authenticated users with access to the…

published October 17, 2014

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in SeedDMS (formerly LetoDMS and MyDMS) before 4.3.4 allow (1) remote authenticated users with access to the LogManagement functionality to read arbitrary files via a .. (dot dot) in the logname parameter to out/out.LogManagement.php or (2) remote attackers to write to arbitrary files via a .. (dot dot) in the fileId parameter to op/op.AddFile2.php. NOTE: vector 2 can be leveraged to execute arbitrary code by using CVE-2014-2278.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05205 · 92.4th percentile
Published
2014-10-17T23:00Z
EPSS history
Timeline
  • 17 OCT 23:00Z
    Multiple directory traversal vulnerabilities in SeedDMS (formerly LetoDMS and MyDMS) before 4.3.4 allow (1) remote authenticated users with access to the…
    cvelistv5