CVE-2011-10010

🗓️ 13 Aug 2025 20:51:41Reported by VulnCheckType

Path traversal flaw in QuickShare FTP 1.2.1 allows authenticated users to access or write outside the virtual directory; with default Writable enabled, attackers can upload to system32 and trigger remote code execution via Managed Object Format injection

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2011-10010	13 Aug 202520:51	–	attackerkb
Circl	CVE-2011-10010	29 May 201815:50	–	circl
CNNVD	QuickShare File Server 安全漏洞	13 Aug 202500:00	–	cnnvd
Cvelist	CVE-2011-10010 QuickShare File Server 1.2.1 Path Traversal RCE	13 Aug 202520:51	–	cvelist
EUVD	EUVD-2011-5244	7 Oct 202500:30	–	euvd
NVD	CVE-2011-10010	13 Aug 202521:15	–	nvd
Positive Technologies	PT-2025-33079 · Unknown · Quickshare File Server	13 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2011-10010	15 Aug 202521:29	–	redhatcve
Vulnrichment	CVE-2011-10010 QuickShare File Server 1.2.1 Path Traversal RCE	13 Aug 202520:51	–	vulnrichment

Vulners

Node

quicksharehq quickshare_file_serverRange0–1.2.2

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "FTP service path handling logic"
    ],
    "product": "QuickShare File Server",
    "vendor": "QuickShareHQ",
    "versions": [
      {
        "lessThan": "1.2.2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
web	www.web.archive.org/web/20120125101026/http://www.quicksharehq.com/blog/quickshare-file-server-1-2-2-released.html
vulncheck	www.vulncheck.com/advisories/quickshare-file-server-path-traversal-rce
exploit-db	www.exploit-db.com/exploits/18933
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/quickshare_traversal_write.rb
exploit-db	www.exploit-db.com/exploits/16105
web	www.web.archive.org/web/20110814125645/http://www.digital-echidna.org/2011/02/quickshare-file-share-1-2-1-directory-traversal-vulnerability/

15 May 2026 11:13Current

8.3High risk

Vulners AI Score8.3

CVSS 49.4

EPSS0.57919

SSVC

CWE-22