Arbitrary File Write Vulnerability in SolidWorks Workgroup PDM 2014

CVE-2014-100015 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:P

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the filename in a file upload.

Learn more about our Web Application Penetration Testing UK.