CVE-2014-2575
- State
- Published
- Severity
- Not scored
- Published
- Jun 6, 2014
- Updated
- Aug 6, 2024
- Reserved
- Mar 21, 2014
Description
Directory traversal vulnerability in the File Manager component in DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC before 13.1.10 and 13.2.x before 13.2.9 allows remote authenticated users to read or write arbitrary files via a .. (dot dot) in the __EVENTARGUMENT parameter.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 107742vdb-entry
- http://security.devexpress.com/de7c4756/?id=ff8c1703126f4717993ac3608a65a2e2
- 67902vdb-entry
- http://packetstormsecurity.com/files/126953/DevExpress-ASP.NET-File-Manager-13.2.8-Directory-Traversal.html
- 20140605 [RT-SA-2014-006] Directory Traversal in DevExpress ASP.NET File Managermailing-list
- 20140605 [RT-SA-2014-006] Directory Traversal in DevExpress ASP.NET File Managermailing-list
- https://www.redteam-pentesting.de/en/advisories/rt-sa-2014-006/-directory-traversal-in-devexpress-asp-net-file-manager
- 33700exploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.