Unrated severityNVD Advisory· Published Nov 20, 2014· Updated May 6, 2026
CVE-2014-8997
CVE-2014-8997
Description
Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/.
Affected products
1- cpe:2.3:a:digitalvidhya:digi_online_examination_system:2.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.