Digi Online Examination System CVE-2014-8997 Unspecified Arbitrary File Upload Vulnerability
BID:71290
Info
Digi Online Examination System CVE-2014-8997 Unspecified Arbitrary File Upload Vulnerability
| Bugtraq ID: | 71290 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-8997 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 13 2014 12:00AM |
| Updated: | Nov 13 2014 12:00AM |
| Credit: | Halil Dalabasmaz |
| Vulnerable: |
ENVATO Digi Online Examination System 2.0 |
| Not Vulnerable: | |
Discussion
Digi Online Examination System CVE-2014-8997 Unspecified Arbitrary File Upload Vulnerability
Digi Online Examination System is prone to an unspecified file-upload vulnerability that lets attackers upload arbitrary files.
An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the affected application.
Digi Online Examination System 2.0 is vulnerable; other versions may also be affected.
Digi Online Examination System is prone to an unspecified file-upload vulnerability that lets attackers upload arbitrary files.
An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the affected application.
Digi Online Examination System 2.0 is vulnerable; other versions may also be affected.
Exploit / POC
Digi Online Examination System CVE-2014-8997 Unspecified Arbitrary File Upload Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
References
Digi Online Examination System CVE-2014-8997 Unspecified Arbitrary File Upload Vulnerability
References:
References: