CVE-2014-10005: Maianscriptworld Maian Uploader

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, which reveals the installation path in an error message.

Affected products

• Maianscriptworld Maian Uploader: version 4.0 only

Published 2015-01-13. Last modified 2026-06-17.