CVE-2014-2042

CVE-2014-2042 is an unrestricted file upload vulnerability affecting Livetecs Timelive before version 6.5.1. This flaw allows remote authenticated users to upload arbitrary executable files through the "Manage Project" functionality. The vulnerability has a CVSS score of 7.5, indicating high severity, as an attacker can achieve arbitrary code execution by uploading a malicious file and directly accessing it in a predictable directory. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.