critical10.0
CVE-2014-2867
Unrestricted file upload vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code by uploading…
Impact
Unrestricted file upload vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to execute arbitrary code by uploading a ColdFusion page, and then accessing it via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paperthin | Commonspot Content Server | through 7.0.1 Versions 8.0.0, 8.0.1, 8.0.2 |