CVE-2013-5688: Path Traversal
Multiple directory traversal vulnerabilities in index.php in AjaXplorer 5.0.2 and earlier allow remote authenticated users to read arbitrary files via a ../%00 (dot dot backslash encoded null byte) in the file parameter in a (1) download or (2) getcontent action, or (3) upload arbitrary files via a ../%00 (dot dot backslash encoded null byte) in the dir parameter in an upload action.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5688?
CVE-2013-5688 has been classified with a medium severity due to its potential to allow unauthorized file access and manipulation.
How do I fix CVE-2013-5688?
To fix CVE-2013-5688, you should upgrade AjaXplorer to version 5.0.3 or later, which addresses the directory traversal vulnerabilities.
Who is affected by CVE-2013-5688?
CVE-2013-5688 affects all versions of AjaXplorer up to and including 5.0.2 and several earlier versions.
What types of actions are vulnerable in CVE-2013-5688?
CVE-2013-5688 allows remote authenticated users to exploit vulnerabilities through actions such as downloading and getting content, leading to arbitrary file read and upload.
Is there a way to mitigate CVE-2013-5688 without upgrading?
Mitigating CVE-2013-5688 without upgrading may involve restricting file permissions and user access, but upgrading is the most effective solution.