realtimeprojects/quixplorer

realtimeprojects/quixplorer

Releases10

Frequency7 months 1 week

Last Release over 10 years ago

Stars32

simply upload and download files to your webserver with a web-interface

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2013-1642 ↗	Jan 2, 2020Thursday, 2 January 2020, 21:15	6.1 MEDIUM	4.3 MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in QuiXplorer before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the (1) dir, (2) item, (3) order, (4) searchitem, (5) selitems[], or (6) srt parameter to index.php or (7) the QUERY_STRING to index.php.
CVE-2013-1641 ↗	Oct 26, 2014Sunday, 26 October 2014, 17:55	—	7.8 HIGH
Directory traversal vulnerability in the zip download functionality in QuiXplorer before 2.5.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the selitems[] parameter in a download_selected action to index.php.