Lucene search
PRIOn knowledge basePRION:CVE-2017-11357HistoryAug 23, 2017 - 5:29 p.m.
Code injection
2017-08-2317:29:00
PRIOn knowledge base
www.prio-n.com
6
Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ui_for_asp.net_ajax | le | 2017.2.621 |
Related
attackerkb
attackerkb
veracode
veracode
Insecure Direct Object Reference
2020-06-25 08:57:24
cvelist
cvelist
cisa_kev
cisa_kev
Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
2023-01-26 00:00:00
nvd
nvd
cve
cve
nessus
nessus
Telerik UI for ASP.NET AJAX RadAsyncUpload Multiple Vulnerabilities
2018-03-02 00:00:00
Telerik UI for ASP.NET AJAX RadAsyncUpload Multiple Vulnerabilities
2020-07-01 00:00:00
exploitpack
exploitpack
Telerik UI for ASP.NET AJAX 2012.3.1308 2017.1.118 - Arbitrary File Upload
2018-01-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Telerik UI Arbitrary File Upload (CVE-2017-11317; CVE-2017-11357)
2020-07-13 00:00:00
thn
thn
prion
prion
Deserialization of untrusted data
2019-12-11 13:15:00
Deserialization of untrusted data
2021-12-22 06:15:00
exploitdb
exploitdb
ics
ics
Threat Actors Exploit Progress Telerik Vulnerabilities in Multiple U.S. Government IIS Servers
2023-06-15 12:00:00
Hitachi ABB Power Grids eSOMS Telerik
2021-03-18 12:00:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Telerik Ui For Asp.Net Ajax
2020-05-29 07:29:52
Exploit for Inadequate Encryption Strength in Telerik Ui For Asp.Net Ajax
2018-01-09 13:53:57