VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 28, 2014· Updated Jun 17, 2026

CVE-2014-2042

CVE-2014-2042

Description

Unrestricted file upload vulnerability in the Manage Project functionality in Livetecs Timelive before 6.5.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in a predictable directory in Uploads/.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

25
  • Livetecs/Timeline24 versions
    cpe:2.3:a:livetecs:timeline:*:*:*:*:*:*:*:*+ 23 more
    • cpe:2.3:a:livetecs:timeline:*:*:*:*:*:*:*:*range: <=6.2.8
    • cpe:2.3:a:livetecs:timeline:2.81:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:2.91:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:2.94:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:3.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:3.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:3.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:3.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:3.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:3.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:3.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:4.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:4.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:4.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:5.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:6.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:6.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:6.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:6.2.6:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:6.2.71:*:*:*:*:*:*:*
    • cpe:2.3:a:livetecs:timeline:6.2.7:*:*:*:*:*:*:*
  • Livetecs/Timelivellm-fuzzy
    Range: <6.5.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.