Directory Traversal Vulnerability in OSClass by OSClass
CVE-2014-8084

Currently unrated

Key Information:

Vendor: Osclass
Status: Osclass
Vendor: CVE Published:; 5 January 2015

What is CVE-2014-8084?

A directory traversal vulnerability exists in the ajax.php file of OSClass prior to version 3.4.3. This flaw allows remote attackers to exploit the ajaxfile parameter using '../' sequences to include and execute arbitrary local files on the server. Successful exploitation may lead to unauthorized access to sensitive files and system compromise.

References

http://www.securityfocus.com/archive/1/534360/100/0/threaded

mailing-listx_refsource_BUGTRAQ

http://www.securityfocus.com/bid/71841

vdb-entryx_refsource_BID

http://karmainsecurity.com/KIS-2014-15

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 5, 2015
Vulnerability Reserved
Oct 9, 2014

CVE-2014-8084 Data

JSON

Osclass

What is CVE-2014-8084?

References

Timeline