Unrated severityNVD Advisory· Published Apr 21, 2015· Updated Jun 17, 2026
CVE-2014-5370
CVE-2014-5370
Description
Directory traversal vulnerability in the CFChart servlet (com.naryx.tagfusion.cfm.cfchartServlet) in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. (dot dot) in the QUERY_STRING to cfchart.cfchart.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:new_atlanta:bluedragon:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:new_atlanta:bluedragon:*:*:*:*:*:*:*:*range: <=7.1.1
- (no CPE)range: <7.1.1.18527
Patches
Vulnerability mechanics
References
5- packetstormsecurity.com/files/131504/BlueDragon-CFChart-Servlet-7.1.1.17759-Directory-Traversal.htmlnvdExploitThird Party Advisory
- www.exploit-db.com/exploits/36815/nvdExploit
- www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5370/nvdExploit
- seclists.org/fulldisclosure/2015/Apr/49nvdThird Party Advisory
- www.osvdb.org/119527nvdBroken Link
News mentions
0No linked articles in our index yet.