Approved changes feed: RSS · Atom

cpe:2.3:a:claudio_klingler:quixplorer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorClaudio Klingler (e046d46c-083b-5d29-87dc-350a2d7f33fb)
ProductQuixplorer (49fb3222-6260-53d3-85d6-bbf8b48b4bcb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-5005 vulnerable 2026-06-08 04:59:34.156011 Details available
Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory.
Published: 2011-12-25T01:00:00.000Z
Updated: 2024-08-07T00:23:39.630Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1911 vulnerable 2026-06-08 04:51:25.693097 Details available
Directory traversal vulnerability in .include/init.php (aka admin/_include/init.php) in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery (TWG) 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to admin/index.php.
Published: 2009-06-04T16:00:00.000Z
Updated: 2024-08-07T05:27:54.931Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.