2 matches found
Code injection
Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 archivename parameter to the Power FS module plugins/action.powerfs/class.PowerFSController.php, a 2 file name to the getTrustSizeOnFileSystem function in the File System Standard modu...
10CVSS7.8AI score0.04121EPSS
SaveExploits0References3Affected Software1
CVE-2013-4267: Improper Neutralization of Special Elements used in an OS Command
Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 archivename parameter to the Power FS module plugins/action.powerfs/class.PowerFSController.php, a 2 file name to the getTrustSizeOnFileSystem function in the File System Standard modu...
10CVSS8.6AI score0.04121EPSS
SaveExploits0References2
20