CVE-2013-6227

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

7.96%

Published

Dec 27, 2014

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

TrickestTrickest PoC index Exploit-DBPydio / AjaXplorer < 5.0.4 - (Unauthenticated) Arbitrary File Upload

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to execute arbitrary code by uploading an executable file, and then accessing this file at a location specified by the format parameter of a move operation.

Affected Products (2)

ajaxplorer · ajaxplorervulnerable

pydio · pydiovulnerable

References (6)

http://pyd.io/pydio-core-5-0-4/

PatchVendor Advisory

http://www.redfsec.com/CVE-2013-6227

URL Repurposed

https://www.exploit-db.com/exploits/46206/

http://pyd.io/pydio-core-5-0-4/

PatchVendor Advisory

http://www.redfsec.com/CVE-2013-6227

URL Repurposed

https://www.exploit-db.com/exploits/46206/

KEV Catalog EPSS Scores Vendors All CVEs