CVE-2014-8997
digitalvidhya digi online examination system: no CVSS score yet. EPSS 9.1% chance of exploitation in the next 30 days.
Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/.
- EPSS
- 9.1% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- digitalvidhya:digi_online_examination_system
References
- http://packetstormsecurity.com/files/129108/Digi-Online-Examination-System-2.0-Shell-Upload.html
- http://www.exploit-db.com/exploits/35223
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98662
- http://packetstormsecurity.com/files/129108/Digi-Online-Examination-System-2.0-Shell-Upload.html
- http://www.exploit-db.com/exploits/35223