CVE-2014-8997

2014-11-2011:00:00

mitre

www.cve.org

7.7 High

AI Score

Confidence

Low

0.148 Low

EPSS

Percentile

95.8%

JSON

Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/.