CVE-2015-3432

Pydio Core before 6.0.7 has multiple XSS vulnerabilities allowing remote script/HTML injection via unspecified vectors. Affected: Pydio Core (pre-6.0.7). Root cause: cross-site scripting in the web application component. Impact: potential execution of arbitrary scripts in user browsers. Remediati...

CVE-2017-5960

An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php" URL. An attacker could execute arbitrary HTML...

pydio.com XSS vulnerability

Vulnerable URL: https://pydio.com/search?s=%3C/span%3E%3Csvg/onload=alert%28%27OPENBUGBOUNTY%27%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 111912 VIP website status:| No Check pydio.com SSL connection:...

AjaXplorer vulnerable to directory traversal

Overview AjaXplorer contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#27462572: AjaXplorer vulnerable to directory traversal

AjaXplorer contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact An authenticated attacker may view files on the server. Solution Use Pydio The developer states that the development of AjaXplorer has been discontinued and there are no...

Unspecified vulnerability in Pydio (CNVD-2015-03022)

AjaXplorer renamed Pydio is a software that implements the file management functions of the remote end through the local... Pydio has an unspecified security vulnerability, details of which are not available at this time...

Unspecified vulnerability in Pydio (CNVD-2015-03021)

AjaXplorer renamed Pydio is a software that implements the file management functions of the remote end through the local... Pydio has an unspecified security vulnerability, details of which are not available at this time...

AjaXplorer 'save_zoho.php' Arbitrary File Upload Vulnerability

AjaXplorer renamed Pydio is a software that enables file management functions on the remote side via local... An arbitrary file upload vulnerability exists in AjaXplorer 'savezoho.php' because the application fails to adequately filter user-supplied input. An attacker can exploit this vulnerabili...

CVE-2013-6227

Unrestricted file upload vulnerability in plugins/editor.zoho/agent/savezoho.php in the Zoho plugin in Pydio formerly AjaXplorer before 5.0.4 allows remote attackers to execute arbitrary code by uploading an executable file, and then accessing this file at a location specified by the format...

Unrestricted file upload

Unrestricted file upload vulnerability in plugins/editor.zoho/agent/savezoho.php in the Zoho plugin in Pydio formerly AjaXplorer before 5.0.4 allows remote attackers to execute arbitrary code by uploading an executable file, and then accessing this file at a location specified by the format...

CVE-2013-6227

Unrestricted file upload vulnerability in plugins/editor.zoho/agent/savezoho.php in the Zoho plugin in Pydio formerly AjaXplorer before 5.0.4 allows remote attackers to execute arbitrary code by uploading an executable file, and then accessing this file at a location specified by the format...

CVE-2013-6227

The CVE-2013-6227 issue affects Pydio/AjaXplorer, specifically the Zoho plugin’s file upload path. The vulnerability is an unrestricted file upload in plugins/editor.zoho/agent/save_zoho.php that allows an attacker to upload an executable file and then access it via a location determined by the f...

PT-2014-3067 · Zoho +1 · Zoho +1

Name of the Vulnerable Software and Affected Versions: Pydio versions prior to 5.0.4 Description: The issue is related to an unrestricted file upload vulnerability in the Zoho plugin. This allows remote attackers to execute arbitrary code by uploading an executable file and then accessing it at a...

Vulnerability in Pydio/AjaXplorer <= 5.0.3

Vulnerability in Pydio/AjaXplorer = 5.0.3 ============ Background: Pydio allows you to instantly turn any server into a powerful file sharing platform. Formerly known as AjaXplorer ============ Description of vulnerability There is a path traversal vulnerability in the zoho plugin that is...

Vulnerability in Pydio/AjaXplorer <= 5.0.3

Vulnerability in Pydio/AjaXplorer = 5.0.3 ============ Background: Pydio allows you to instantly turn any server into a powerful file sharing platform. Formerly known as AjaXplorer ============ Description of vulnerability There is an unrestricted upload capability, in one of the plugins that is...

Pydio File Upload

Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

CVE-2013-6226

Directory traversal vulnerability in plugins/editor.zoho/agent/savezoho.php in the Zoho plugin in Pydio formerly AjaXplorer before 5.0.4 allows remote attackers to read or delete arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in plugins/editor.zoho/agent/savezoho.php in the Zoho plugin in Pydio formerly AjaXplorer before 5.0.4 allows remote attackers to read or delete arbitrary files via unspecified vectors...

CVE-2013-6226

Directory traversal vulnerability in plugins/editor.zoho/agent/savezoho.php in the Zoho plugin in Pydio formerly AjaXplorer before 5.0.4 allows remote attackers to read or delete arbitrary files via unspecified vectors...

CVE-2013-6226

CVE-2013-6226: A directory traversal vulnerability in Pydio/AjaXplorer’s Zoho plugin (plugins/editor.zoho/agent/save_zoho.php) affects versions before 5.0.4, allowing remote read/delete of arbitrary files via untrusted input. Root cause is an unprotected path traversal in the Zoho plugin. Impact ...