S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
high·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2014-10037 Scanner

Detects 'Directory Traversal' vulnerability in DomPHP affects v. 0.83 and earlier.

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
2.2k
Times Used
continuous scan runs
3.5k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2014-10037
7.5
CVSS

Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. (dot dot) in the url parameter to photoalbum/index.php.

Attack Vector
-
Privileges Req.
-
User Interaction
-
Affected
n/aby n/a
n/a
Updated Aug 21, 2026View on NVD →
Detail

DomPHP is a powerful tool for web developers that can be used to create dynamic web applications. With features such as an easy-to-use interface, support for various databases, and built-in security measures, DomPHP is a popular choice among developers. However, as with any software, vulnerabilities can still arise. One such vulnerability is CVE-2014-10037.

CVE-2014-10037 is a directory traversal vulnerability that can allow remote attackers to have an unspecified impact by exploiting a ".." or "dot dot" in the url parameter to photoalbum/index.php. This vulnerability can be extremely dangerous if exploited as it can give attackers access to sensitive information or even allow them to take control of the web application.

If this vulnerability is exploited, an attacker could gain access to files and directories that they should not have access to. This could include sensitive information such as user passwords, credit card information, or other confidential data. In some cases, attackers may even be able to take control of the web application and use it to launch further attacks against other systems or networks.

Thanks to the pro features of the s4e.io platform, those who read this article can easily and quickly learn about vulnerabilities in their digital assets. With a comprehensive collection of vulnerability data, risk ratings, and recommendations for mitigation, the s4e.io platform can help you secure your web applications and protect your digital assets from attackers. So why wait? Sign up today and start securing your web applications!

 

REFERENCES

Solution Advice

There are several precautions that can be taken to protect against this vulnerability. Here are some recommendations that can help you safeguard your web application:

  • Use input validation and sanitization to prevent malicious input from being processed.
  • Use proper error handling to prevent sensitive information from being disclosed in error messages.
  • Limit access to files and directories by using proper permissions and access control.
  • Use web application firewalls (WAFs) to prevent attacks that exploit this vulnerability.
  • Keep your software up-to-date by installing patches and updates as they become available.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

CVE-2014-10037 scanner - Directory Traversal vulnerability in DomPHP | S4E