CVE-2014-8084

High

Published: 05/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

CVE-2014-8084 in OSClass before version 3.4.3 has a directory traversal vulnerability that allows remote attackers to include and execute arbitrary local files.

Risk Assessment

Attackers can exploit this vulnerability to execute malicious code on the server, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to upgrade OSClass to version 3.4.3 or later to mitigate this vulnerability.

Other vulnerabilities in OSClass

CVE-2014-8083High
SQL injection vulnerability in the Search::setJsonAlert method in OSClass before version 3.4.3 allows remote attackers to execute arbitrary SQL commands via the alert parameter in a search alert subscription action.

Original NVD description (English source)

Directory traversal vulnerability in oc-includes/osclass/controller/ajax.php in OSClass before 3.4.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ajaxfile parameter in a custom action.