CVE-2013-5353

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.29%

Published

Jun 13, 2014

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Unrestricted file upload vulnerability in system/controllers/ajax/attachments.php in Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

Affected Products (2)

sharetronix · sharetronixvulnerable

References (10)

http://osvdb.org/100604

http://secunia.com/advisories/53936

http://secunia.com/secunia_research/2013-9/

http://www.securityfocus.com/bid/64102

https://exchange.xforce.ibmcloud.com/vulnerabilities/89502

http://osvdb.org/100604

http://secunia.com/advisories/53936

http://secunia.com/secunia_research/2013-9/

http://www.securityfocus.com/bid/64102

https://exchange.xforce.ibmcloud.com/vulnerabilities/89502

KEV Catalog EPSS Scores Vendors All CVEs