Export limit exceeded: 425803 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2009-1911

Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery (TWG) 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to admin/index.php.

CVSS 2.0 · 6.8 Medium EPSS 2.5% KEV · Not listed
Vendors
Claudio Klingler Tinywebgallery
Products
Quixplorer Tinywebgallery
CVE-2011-5005

Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory.

CVSS 2.0 · 7.5 High EPSS 3.7% KEV · Not listed
Vendors
Claudio Klingler Mads Brunn
Products
Quixplorer T3quixplorer