CVE-2014-8997
Last modified
CVE-2014-8997 is a vulnerability of currently unknown severity. Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/.. EPSS estimates a 9.13% chance of exploitation in the next 30 days.
Description
Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Digitalvidhya | Digi Online Examination System | 2.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-8997?
How severe is CVE-2014-8997?
How do I fix CVE-2014-8997?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-8991pip 1.3 through 1.5.6 allows local users to cause a denial o…
- CVE-2014-8992Cross-site scripting (XSS) vulnerability in manager/assets/f…
- CVE-2014-8993Cross-site scripting (XSS) vulnerability in the backend in O…
- CVE-2014-8994The check_diskio plugin 3.2.6 and earlier for Nagios and Ici…
- CVE-2014-8995SQL injection vulnerability in Maarch LetterBox 2.8 allows r…
- CVE-2014-8996Multiple cross-site scripting (XSS) vulnerabilities in Nibbl…
- CVE-2014-8998lib/message.php in X7 Chat 2.0.0 through 2.0.5.1 allows remo…
- CVE-2014-8999SQL injection vulnerability in htdocs/modules/system/admin.p…
- CVE-2014-9000Mule Enterprise Management Console (MMC) does not properly r…
- CVE-2014-9001reminders/index.php in Incredible PBX 11 2.0.6.5.0 allows re…
- CVE-2014-9002Lantronix xPrintServer does not properly restrict access to …
- CVE-2014-9003Cross-site request forgery (CSRF) vulnerability in Lantronix…
Are you affected by CVE-2014-8997?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST