CVE-2013-6226

Directory traversal vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to read or delete arbitrary files via unspecified vectors.

Published: Nov 14, 2013
Updated: Apr 13, 2023
CVE: CVE-2013-6226
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 8.5
AV:N/AC:L/Au:N/C:C/I:N/A:P

CWEs:

CWE-22

OWASP TOP 10:

A5 - Broken Access Control

Affected Software
References

Software	From	Fixed in
ajaxplorer / ajaxplorer	3.1.1	3.1.1.x
ajaxplorer / ajaxplorer	2.5	2.5.x
ajaxplorer / ajaxplorer	3.3.2	3.3.2.x
ajaxplorer / ajaxplorer	3.0.1	3.0.1.x
ajaxplorer / ajaxplorer	4.2.3	4.2.3.x
ajaxplorer / ajaxplorer	4.0.4	4.0.4.x
ajaxplorer / ajaxplorer	3.3.4	3.3.4.x
ajaxplorer / ajaxplorer	5.0.1	5.0.1.x
ajaxplorer / ajaxplorer	3.0	3.0.x
ajaxplorer / ajaxplorer	2.7.2	2.7.2.x
ajaxplorer / ajaxplorer	3.1	3.1.x
ajaxplorer / ajaxplorer	3.2.3	3.2.3.x
ajaxplorer / ajaxplorer	2.6.0	2.6.0.x
ajaxplorer / ajaxplorer	2.5.4	2.5.4.x
ajaxplorer / ajaxplorer	4.2.2	4.2.2.x
ajaxplorer / ajaxplorer	2.3.3	2.3.3.x
ajaxplorer / ajaxplorer	5.0.2	5.0.2.x
ajaxplorer / ajaxplorer	3.2.1	3.2.1.x
ajaxplorer / ajaxplorer	3.2.5	3.2.5.x
ajaxplorer / ajaxplorer	-	5.0.3.x
ajaxplorer / ajaxplorer	4.0.3	4.0.3.x
ajaxplorer / ajaxplorer	2.3.4	2.3.4.x
ajaxplorer / ajaxplorer	3.0.3	3.0.3.x
ajaxplorer / ajaxplorer	2.7.1	2.7.1.x
ajaxplorer / ajaxplorer	3.2.2	3.2.2.x
ajaxplorer / ajaxplorer	3.3.5	3.3.5.x
ajaxplorer / ajaxplorer	4.0	4.0.x
ajaxplorer / ajaxplorer	2.7.3	2.7.3.x
ajaxplorer / ajaxplorer	3.2	3.2.x
ajaxplorer / ajaxplorer	5.0.0	5.0.0.x
ajaxplorer / ajaxplorer	3.3.3	3.3.3.x
ajaxplorer / ajaxplorer	4.0.2	4.0.2.x
ajaxplorer / ajaxplorer	3.2.4	3.2.4.x
ajaxplorer / ajaxplorer	3.0.2	3.0.2.x
ajaxplorer / ajaxplorer	4.0.1	4.0.1.x
ajaxplorer / ajaxplorer	4.2.0	4.2.0.x
ajaxplorer / ajaxplorer	2.5.5	2.5.5.x

Vulnerability Database

CVE-2013-6226