RETIRED: AjaXplorer 'checkInstall.php' Remote Command Execution Vulnerability

Bugtraq ID:	62603
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 23 2013 12:00AM
Updated:	Oct 04 2013 12:13AM
Credit:	Reported by the vendor.
Vulnerable:	AjaXplorer AjaXplorer 2.5.5 AjaXplorer AjaXplorer 2.5.3 AjaXplorer AjaXplorer 2.5.2
Not Vulnerable:	AjaXplorer AjaXplorer 2.6.1

RETIRED: AjaXplorer 'checkInstall.php' Remote Command Execution Vulnerability

AjaXplorer is prone to a remote command-execution vulnerability.

Remote attackers can exploit this issue to execute arbitrary commands. This may facilitate a complete compromise of an affected system.

AjaXplorer 2.5.5 and prior are vulnerable.

Note: This BID is being retired as a duplicate of the issue discussed in BID 39334 (AjaXplorer Remote Command Injection and Local File Disclosure Vulnerabilities).

RETIRED: AjaXplorer 'checkInstall.php' Remote Command Execution Vulnerability

An attacker can exploit this issue using readily available tools.

RETIRED: AjaXplorer 'checkInstall.php' Remote Command Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: AjaXplorer 'checkInstall.php' Remote Command Execution Vulnerability

References:

• AjaXplorer Homepage (AjaXplorer)