55 matches found
EUVD-2008-6601
Malware in sbrugna...
EUVD-2015-5601
Malware in sbrugna...
EUVD-2010-5299
Malware in sbrugna...
CVE-2010-10013
An unauthenticated remote command execution vulnerability exists in AjaXplorer now known as Pydio Cells versions prior to 2.6. The flaw resides in the checkInstall.php script within the access.ssh plugin, which fails to properly sanitize user-supplied input to the destServer GET parameter. By...
CVE-2010-10013 AjaXplorer < 2.6 checkInstall.php Unauthenticated RCE
An unauthenticated remote command execution vulnerability exists in AjaXplorer now known as Pydio Cells versions prior to 2.6. The flaw resides in the checkInstall.php script within the access.ssh plugin, which fails to properly sanitize user-supplied input to the destServer GET parameter. By...
Cross site scripting
An issue was discovered in AjaXplorer 4.2.3, allows attackers to cause cross site scripting vulnerabilities via a crafted svg file upload...
CVE-2022-40358
CVE-2022-40358 affects AjaXplorer 4.2.3. The issue is a cross-site scripting vulnerability triggered by uploading a crafted SVG file, affecting the web-based file manager component. According to the CVE record, exploitation details are not publicly provided, and the CVSS data indicates a network-...
CVE-2022-40358
An issue was discovered in AjaXplorer 4.2.3, allows attackers to cause cross site scripting vulnerabilities via a crafted svg file upload...
Pydio / AjaXplorer < 5.0.4 - Unauthenticated Arbitrary File Upload Exploit
Exploit for php platform in category web applications Exploit Title: Unauthenticated Arbitrary File Upload Vulnerability In Pydio/AjaXplorer 5.0.3 – 3.3.5 Exploit Author: @jazz Vendor Homepage: https://pydio.com/ Software Link:...
Pydio / AjaXplorer 5.0.3 Shell Upload / Directory Traversal
Exploit Title: Unauthenticated Arbitrary File Upload Vulnerability In Pydio/AjaXplorer 5.0.3 a 3.3.5 Date: 01/18/2019 Exploit Author: @jazz Vendor Homepage: https://pydio.com/ Software Link:...
Pydio AjaXplorer 5.0.4 - (Unauthenticated) Arbitrary File Upload
Pydio AjaXplorer 5.0.4 - Unauthenticated Arbitrary File Upload Exploit Title: Unauthenticated Arbitrary File Upload Vulnerability In Pydio/AjaXplorer 5.0.3 – 3.3.5 Date: 01/18/2019 Exploit Author: @jazz Vendor Homepage: https://pydio.com/ Software Link:...
Pydio / AjaXplorer < 5.0.4 - (Unauthenticated) Arbitrary File Upload
Exploit Title: Unauthenticated Arbitrary File Upload Vulnerability In Pydio/AjaXplorer 5.0.3 – 3.3.5 Date: 01/18/2019 Exploit Author: @jazz Vendor Homepage: https://pydio.com/ Software Link:...
Command injection
Pydio formerly AjaXplorer before 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors, aka "Pydio OS Command Injection Vulnerabilities."...
CVE-2015-3432
Pydio Core before 6.0.7 has multiple XSS vulnerabilities allowing remote script/HTML injection via unspecified vectors. Affected: Pydio Core (pre-6.0.7). Root cause: cross-site scripting in the web application component. Impact: potential execution of arbitrary scripts in user browsers. Remediati...
CVE-2015-3431
Pydio formerly AjaXplorer before 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors, aka "Pydio OS Command Injection Vulnerabilities."...
CVE-2015-3431
Pydio Core (formerly AjaXplorer)
JVN#27462572: AjaXplorer vulnerable to directory traversal
AjaXplorer contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact An authenticated attacker may view files on the server. Solution Use Pydio The developer states that the development of AjaXplorer has been discontinued and there are no...
AjaXplorer 1.0 - Multiple Vulnerabilities
No description provided by source. Trustwave SpiderLabs Security Advisory TWSL2013-027: Multiple Vulnerabilities in AjaXplorer Published: 09/05/13 Version: 1.0 Vendor: AjaXplorer http://ajaxplorer.info Product: AjaXplorer Version affected: 5.0.2 and prior Product description: AjaXplorer is an ope...
Vulnerability in Pydio/AjaXplorer <= 5.0.3
Vulnerability in Pydio/AjaXplorer = 5.0.3 ============ Background: Pydio allows you to instantly turn any server into a powerful file sharing platform. Formerly known as AjaXplorer ============ Description of vulnerability There is a path traversal vulnerability in the zoho plugin that is...
Vulnerability in Pydio/AjaXplorer <= 5.0.3
Vulnerability in Pydio/AjaXplorer = 5.0.3 ============ Background: Pydio allows you to instantly turn any server into a powerful file sharing platform. Formerly known as AjaXplorer ============ Description of vulnerability There is an unrestricted upload capability, in one of the plugins that is...