Ajaxplorer

9 CVEs across 1 Ajaxplorer products. Browse Ajaxplorer vulnerabilities, severities, and proof-of-concept exploits.

Ajaxplorer products with known CVEs

ProductCVEs
Ajaxplorer9
Ajaxplorer CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2010-100132025-08-08An unauthenticated remote command execution vulnerability exists in AjaXplorer (now known as Pydio Cells) versions prior to 2.6. The flaw resides in the checkI…
CVE-2022-40358Medium5.42022-09-23An issue was discovered in AjaXplorer 4.2.3, allows attackers to cause cross site scripting vulnerabilities via a crafted svg file upload.
CVE-2015-56502015-10-06Directory traversal vulnerability in AjaXplorer 2.0 allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2013-62272014-12-27Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote…
CVE-2013-62262013-11-14Directory traversal vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attac…
CVE-2013-56882013-11-05Multiple directory traversal vulnerabilities in index.php in AjaXplorer 5.0.2 and earlier allow remote authenticated users to read arbitrary files via a ../%00…
CVE-2012-18402012-03-22AjaXplorer 3.2.x before 3.2.5 and 4.0.x before 4.0.4 does not properly perform cookie authentication, which allows remote attackers to obtain login access by l…
CVE-2012-18392012-03-22Multiple directory traversal vulnerabilities in the Get Template feature in plugins/gui.ajax/class.AJXP_ClientDriver.php in AjaXplorer 3.2.x before 3.2.5 and 4…
CVE-2008-66392009-04-07Cross-site request forgery (CSRF) vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrato…