CVE-2013-6226: Path Traversal

Q: What is the severity of CVE-2013-6226?

CVE-2013-6226 is rated as a moderate severity directory traversal vulnerability affecting multiple versions of the Ajaxplorer software.

Q: How do I fix CVE-2013-6226?

To fix CVE-2013-6226, upgrade to Ajaxplorer version 5.0.4 or later, which includes a patch for this vulnerability.

Q: What can attackers exploit in CVE-2013-6226?

Attackers can exploit CVE-2013-6226 to read or delete arbitrary files on the server due to insufficient input validation.

Q: Which versions of Ajaxplorer are affected by CVE-2013-6226?

CVE-2013-6226 affects all versions of Ajaxplorer prior to 5.0.4, including versions 2.3.3 to 5.0.3.

Q: Is CVE-2013-6226 a remote vulnerability?

Yes, CVE-2013-6226 is a remote vulnerability, allowing attackers to exploit it without physical access to the affected system.

Published Nov 14, 2013

Updated

Directory traversal vulnerability in plugins/editor.zoho/agent/savezoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to read or delete arbitrary files via unspecified vectors.

Affected Software

37 affected components

AjaXplorer AjaXplorer<=5.0.3

AjaXplorer AjaXplorer=2.3.3

AjaXplorer AjaXplorer=2.3.4

AjaXplorer AjaXplorer=2.5

AjaXplorer AjaXplorer=2.5.4

AjaXplorer AjaXplorer=2.5.5

AjaXplorer AjaXplorer=2.6.0

AjaXplorer AjaXplorer=2.7.1

AjaXplorer AjaXplorer=2.7.2

AjaXplorer AjaXplorer=2.7.3

AjaXplorer AjaXplorer=3.0

AjaXplorer AjaXplorer=3.0.1

AjaXplorer AjaXplorer=3.0.2

AjaXplorer AjaXplorer=3.0.3

AjaXplorer AjaXplorer=3.1

AjaXplorer AjaXplorer=3.1.1

AjaXplorer AjaXplorer=3.2

AjaXplorer AjaXplorer=3.2.1

AjaXplorer AjaXplorer=3.2.2

AjaXplorer AjaXplorer=3.2.3

AjaXplorer AjaXplorer=3.2.4

AjaXplorer AjaXplorer=3.2.5

AjaXplorer AjaXplorer=3.3.2

AjaXplorer AjaXplorer=3.3.3

AjaXplorer AjaXplorer=3.3.4

AjaXplorer AjaXplorer=3.3.5

AjaXplorer AjaXplorer=4.0

AjaXplorer AjaXplorer=4.0.1

AjaXplorer AjaXplorer=4.0.2

AjaXplorer AjaXplorer=4.0.3

AjaXplorer AjaXplorer=4.0.4

AjaXplorer AjaXplorer=4.2.0

AjaXplorer AjaXplorer=4.2.2

AjaXplorer AjaXplorer=4.2.3

AjaXplorer AjaXplorer=5.0.0

AjaXplorer AjaXplorer=5.0.1

AjaXplorer AjaXplorer=5.0.2

Event History

Nov 14, 2013

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

via NVD·08:55 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-6226?

CVE-2013-6226 is rated as a moderate severity directory traversal vulnerability affecting multiple versions of the Ajaxplorer software.

How do I fix CVE-2013-6226?

To fix CVE-2013-6226, upgrade to Ajaxplorer version 5.0.4 or later, which includes a patch for this vulnerability.

What can attackers exploit in CVE-2013-6226?