CVEvulnerability

CVE-2011-5005

7.5 HIGH Published 2011-12-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-12-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory.

Affected configurations

• claudio klingler quixplorer (<= 2.3) • claudio klingler quixplorer 1.0 • claudio klingler quixplorer 1.1 • claudio klingler quixplorer 1.2 • claudio klingler quixplorer 1.4 • claudio klingler quixplorer 1.5 • claudio klingler quixplorer 1.6 • claudio klingler quixplorer 2.0 • claudio klingler quixplorer 2.1.1 • claudio klingler quixplorer 2.2 • mads brunn t3quixplorer 1.0.0 • mads brunn t3quixplorer 1.0.1 • mads brunn t3quixplorer 1.0.2 • mads brunn t3quixplorer 1.2.0 • mads brunn t3quixplorer 1.3.0 • mads brunn t3quixplorer 1.4.0 • mads brunn t3quixplorer 1.5.0 • mads brunn t3quixplorer 1.6.0 • mads brunn t3quixplorer 1.7.0 • mads brunn t3quixplorer 1.7.1

References