VIR Vulnerability Intelligence Relay

CVE-2013-6226

high
Published 2013-11-14 · Modified 2026-04-29
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
8.5

Description

Directory traversal vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to read or delete arbitrary files via unspecified vectors.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact
VendorProductVersionsFixed
ajaxplorerajaxplorer{"endIncluding":"5.0.3"}
ajaxplorerajaxplorer2.3.3
ajaxplorerajaxplorer2.3.4
ajaxplorerajaxplorer2.5
ajaxplorerajaxplorer2.5.4
ajaxplorerajaxplorer2.5.5
ajaxplorerajaxplorer2.6.0
ajaxplorerajaxplorer2.7.1
ajaxplorerajaxplorer2.7.2
ajaxplorerajaxplorer2.7.3
ajaxplorerajaxplorer3.0
ajaxplorerajaxplorer3.0.1
ajaxplorerajaxplorer3.0.2
ajaxplorerajaxplorer3.0.3
ajaxplorerajaxplorer3.1
ajaxplorerajaxplorer3.1.1
ajaxplorerajaxplorer3.2
ajaxplorerajaxplorer3.2.1
ajaxplorerajaxplorer3.2.2
ajaxplorerajaxplorer3.2.3
ajaxplorerajaxplorer3.2.4
ajaxplorerajaxplorer3.2.5
ajaxplorerajaxplorer3.3.2
ajaxplorerajaxplorer3.3.3
ajaxplorerajaxplorer3.3.4
ajaxplorerajaxplorer3.3.5
ajaxplorerajaxplorer4.0
ajaxplorerajaxplorer4.0.1
ajaxplorerajaxplorer4.0.2
ajaxplorerajaxplorer4.0.3
ajaxplorerajaxplorer4.0.4
ajaxplorerajaxplorer4.2.0
ajaxplorerajaxplorer4.2.2
ajaxplorerajaxplorer4.2.3
ajaxplorerajaxplorer5.0.0
ajaxplorerajaxplorer5.0.1
ajaxplorerajaxplorer5.0.2

References

CWEs

CWE-22

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.