high7.5Public exploit code
CVE-2011-5005
Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable e…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- QuiXplorer 2.3 - Bugtraq Arbitrary File Upload2011-11-15 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Claudio Klingler | Quixplorer | through 2.3 Versions 1.0, 1.1, 1.2, 1.4, 1.5 |
| Mads Brunn | T3quixplorer | Versions 1.0.0, 1.0.1, 1.0.2, 1.2.0, 1.3.0, 1.4.0 |