AjaXplorer 'save_zoho.php' Arbitrary File Upload Vulnerability

Bugtraq ID:	63662
Class:	Input Validation Error
CVE:	CVE-2013-6227
Remote:	Yes
Local:	No
Published:	Nov 10 2013 12:00AM
Updated:	Nov 10 2013 12:00AM
Credit:	Craig Arendt (redfsec)
Vulnerable:	AjaXplorer AjaXplorer 5.0.1 AjaXplorer AjaXplorer 4.0.4 AjaXplorer AjaXplorer 4.0.3 AjaXplorer AjaXplorer 4.0.2 AjaXplorer AjaXplorer 4.0.1 AjaXplorer AjaXplorer 5.0.3 AjaXplorer AjaXplorer 5.0.2
Not Vulnerable:	AjaXplorer AjaXplorer 5.0.4

AjaXplorer 'save_zoho.php' Arbitrary File Upload Vulnerability

AjaXplorer is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input.

An attacker can exploit this issue to upload arbitrary file and run it in the context of the webserver process.

AjaXplorer 3.3.5 through 5.0.3 are vulnerable.

AjaXplorer 'save_zoho.php' Arbitrary File Upload Vulnerability

An attacker can exploit this issue using a web browser.

AjaXplorer 'save_zoho.php' Arbitrary File Upload Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

AjaXplorer 'save_zoho.php' Arbitrary File Upload Vulnerability

References:

• AjaXplorer Homepage (AjaXplorer)
  
• AjaXplorer/Pydio Core 5.0.4 released (Abstrium SAS)
  
• Arbitrary Upload Vulnerability In Pydio/AjaXplorer 5.0.3 �?? 3.3.5 (redfsec)