CVE-2014-100015

EPSS 57.4%

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.

Affected products

n/a · n/a

public PoCs found — 5

exploitdbwww.exploit-db.com/exploits/32163unverified exploitdbwww.exploit-db.com/exploits/31831unverified cve_referencepacketstormsecurity.com/files/125361unverified cve_referencewww.exploit-db.com/exploits/31831unverified cve_referencewww.exploit-db.com/exploits/32163unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/125361 https://exchange.xforce.ibmcloud.com/vulnerabilities/91518 http://www.exploit-db.com/exploits/31831 http://www.exploit-db.com/exploits/32163