CVE-2013-5353 | BDVDB-2026-62178 Detail

Description#

Unrestricted file upload vulnerability in system/controllers/ajax/attachments.php in Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/89502
http://www.securityfocus.com/bid/64102
http://secunia.com/secunia_research/2013-9/
http://secunia.com/advisories/53936
http://osvdb.org/100604

Exploit#

No public exploit known

History#

Version 12014-06-13Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.