Improper input validation in Ithoughts Ithoughtshd

CVE-2014-1827

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.010 (59.5th percentile) — read the EPSS interpretation.