CVE-2014-8084

Directory traversal vulnerability in oc-includes/osclass/controller/ajax.php in OSClass before 3.4.3 allows remote attackers to include and execute arbitrary…

published January 5, 2015

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in oc-includes/osclass/controller/ajax.php in OSClass before 3.4.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ajaxfile parameter in a custom action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03249 · 88.2th percentile
Published
2015-01-05T20:00Z
EPSS history
Timeline
  • 05 JAN 20:00Z
    Directory traversal vulnerability in oc-includes/osclass/controller/ajax.php in OSClass before 3.4.3 allows remote attackers to include and execute arbitrary…
    cvelistv5