Unrated severityNVD Advisory· Published Aug 18, 2015· Updated May 6, 2026
CVE-2015-4670
CVE-2015-4670
Description
Directory traversal vulnerability in the AjaxFileUpload control in DevExpress AJAX Control Toolkit (aka AjaxControlToolkit) before 15.1 allows remote attackers to write to arbitrary files via a .. (dot dot) in the fileId parameter to AjaxFileUploadHandler.axd.
Affected products
1- cpe:2.3:a:devexpress:ajax_control_toolkit:*:*:*:*:*:*:*:*Range: <=15.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.