CVE-2013-6227 | BDVDB-2026-67002 Detail

Description#

Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to execute arbitrary code by uploading an executable file, and then accessing this file at a location specified by the format parameter of a move operation.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12014-12-27Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.