VIR Vulnerability Intelligence Relay

CVE-2013-6226

high
Published 2013-11-14 · Modified 2026-04-29
CVSS v3
—
CVSS v2
8.5
VIR risk
8.5

Description

Directory traversal vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to read or delete arbitrary files via unspecified vectors.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact
VendorProductVersionsFixed
ajaxplorerajaxplorer{"endIncluding":"5.0.3"}
ajaxplorerajaxplorer2.3.3
ajaxplorerajaxplorer2.3.4
ajaxplorerajaxplorer2.5
ajaxplorerajaxplorer2.5.4
ajaxplorerajaxplorer2.5.5
ajaxplorerajaxplorer2.6.0
ajaxplorerajaxplorer2.7.1
ajaxplorerajaxplorer2.7.2
ajaxplorerajaxplorer2.7.3
ajaxplorerajaxplorer3.0
ajaxplorerajaxplorer3.0.1
ajaxplorerajaxplorer3.0.2
ajaxplorerajaxplorer3.0.3
ajaxplorerajaxplorer3.1
ajaxplorerajaxplorer3.1.1
ajaxplorerajaxplorer3.2
ajaxplorerajaxplorer3.2.1
ajaxplorerajaxplorer3.2.2
ajaxplorerajaxplorer3.2.3
ajaxplorerajaxplorer3.2.4
ajaxplorerajaxplorer3.2.5
ajaxplorerajaxplorer3.3.2
ajaxplorerajaxplorer3.3.3
ajaxplorerajaxplorer3.3.4
ajaxplorerajaxplorer3.3.5
ajaxplorerajaxplorer4.0
ajaxplorerajaxplorer4.0.1
ajaxplorerajaxplorer4.0.2
ajaxplorerajaxplorer4.0.3
ajaxplorerajaxplorer4.0.4
ajaxplorerajaxplorer4.2.0
ajaxplorerajaxplorer4.2.2
ajaxplorerajaxplorer4.2.3
ajaxplorerajaxplorer5.0.0
ajaxplorerajaxplorer5.0.1
ajaxplorerajaxplorer5.0.2

References

CWEs

CWE-22

Verify integrity in audit chain (admin only). AS-IS.