Vulnerabilities > CVE-2011-5005
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory.
Vulnerable Configurations
Exploit-Db
description | QuiXplorer 2.3 - Bugtraq File Upload Vulnerability. CVE-2011-5005. Webapps exploit for php platform |
file | exploits/php/webapps/18118.txt |
id | EDB-ID:18118 |
last seen | 2016-02-02 |
modified | 2011-11-15 |
platform | php |
port | |
published | 2011-11-15 |
reporter | PCA |
source | https://www.exploit-db.com/download/18118/ |
title | QuiXplorer 2.3 - Bugtraq File Upload Vulnerability |
type | webapps |