QwikSec

Security Database

CVE

CWE

Training

CVE-2014-2025

Published: Jan 31, 2020

Modified: Aug 6, 2024

PUBLISHED

Description

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unknown vectors.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.christian-schneider.net/advisories/CVE-2014-2025.txt

x_refsource_MISC

https://help.unitedplanet.com/?rq_AppGuid=C203A277EDDF9AD2492B776B996B20D4A7C58395&rq_TargetPageGuid=2EBBF802B1970FE31EFC8A34108DF3F47E7A8EEC&rq_RecId=31&rq_SourceAppGuid=C203A277EDDF9AD2492B776B996B20D4A7C58395&rq_SourcePageGuid=7A91F4B76FFC41A18F4EA4ACE26F31E033C5B018&rq_SourceRecId=31

x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/99568

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.