VYPR

T3quixplorer

by Mads Brunn

CVEs (2)

  • CVE-2011-5005Dec 25, 2011
    risk 0.03cvss epss 0.06

    Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory.

  • CVE-2010-1021Mar 19, 2010
    risk 0.00cvss epss 0.00

    Cross-site scripting (XSS) vulnerability in the Typo3 Quixplorer (t3quixplorer) extension before 1.7.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.