QuiXplorer 'selitems[]' Parameter Arbitrary File Disclosure Vulnerability
BID:63964
Info
QuiXplorer 'selitems[]' Parameter Arbitrary File Disclosure Vulnerability
|
Bugtraq ID:
|
63964
|
|
Class:
|
Input Validation Error
|
|
CVE:
|
CVE-2013-1641
|
|
Remote:
|
Yes
|
|
Local:
|
No
|
|
Published:
|
Nov 06 2013 12:00AM
|
|
Updated:
|
Nov 06 2013 12:00AM
|
|
Credit:
|
Vikas Singhal of Trustwave SpiderLabs
|
|
Vulnerable:
|
QuiXplorer QuiXplorer 2.5.4
|
|
|
|
Not Vulnerable:
|
QuiXplorer QuiXplorer 2.5.5
|
Discussion
Exploit / POC
Solution / Fix
References