Code injection

Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 archivename parameter to the Power FS module plugins/action.powerfs/class.PowerFSController.php, a 2 file name to the getTrustSizeOnFileSystem function in the File System Standard modu...

PT-2020-7490

Name of the Vulnerable Software and Affected Versions: Ajaxeplorer versions prior to 5.0.1 Description: The issue allows remote attackers to execute arbitrary commands. This can be achieved by injecting shell metacharacters into specific parameters, including the archive name parameter in the Pow...

CVE-2013-4267: Improper Neutralization of Special Elements used in an OS Command

Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 archivename parameter to the Power FS module plugins/action.powerfs/class.PowerFSController.php, a 2 file name to the getTrustSizeOnFileSystem function in the File System Standard modu...