Lucene search
HistoryApr 15, 2014 - 11:13 p.m.
CVE-2014-2867
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.3%
Unrestricted file upload vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code by uploading a ColdFusion page, and then accessing it via unspecified vectors.
Affected configurations
Node
paperthincommonspot_content_serverRange≤7.0.1
ORpaperthincommonspot_content_serverMatch8.0.0
ORpaperthincommonspot_content_serverMatch8.0.1
ORpaperthincommonspot_content_serverMatch8.0.2
References
Related
prion
prion
Unrestricted file upload
2014-04-15 23:13:00
cvelist
cvelist
CVE-2014-2867
2022-10-03 16:20:48
cve
cve
CVE-2014-2867
2022-10-03 16:20:48
nessus
nessus
CommonSpot < 7.0.2 / 8.0.3 / 9.0.0 Multiple Vulnerabilities
2014-04-18 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.3%
Related for NVD:CVE-2014-2867