QuickShare File Server 1.2.1 Path Traversal RCE
63Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendcvss 9.4epss 1.6%
de la publicación al arma0 días
Publicada en NVD13 ago
metasploit3 feb
probabilidad de explotación
1.6%top 27% de las CVE
explotación observada
noninguna fuente lo reporta
4 exploit(s) público(s)
QuickShare File Server 1.2.1 contains a path traversal vulnerability in its FTP service due to improper sanitation of user-supplied file paths. Authenticated users can exploit this flaw by submitting crafted sequences to access or write files outside the intended virtual directory. When the "Writable" option is enabled (default during account creation), this allows attackers to upload arbitrary files to privileged locations such as system32, enabling remote code execution via MOF injection or executable placement.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Productos afectados
QuickShareHQ · QuickShare File ServerPoCs públicas encontradas — 4
cve_referenceraw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/quickshare_traversal_write.rbno verificadocve_referenceweb.archive.org/web/20110814125645/http://www.digital-echidna.org/2011/02/quickshare-file-share-1-2-1-directory-traversal-vulnerability/no verificadocve_referencewww.exploit-db.com/exploits/16105no verificadocve_referencewww.exploit-db.com/exploits/18933no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/quickshare_traversal_write.rbhttps://web.archive.org/web/20110814125645/http://www.digital-echidna.org/2011/02/quickshare-file-share-1-2-1-directory-traversal-vulnerability/https://web.archive.org/web/20120125101026/http://www.quicksharehq.com/blog/quickshare-file-server-1-2-2-released.htmlhttps://www.exploit-db.com/exploits/16105https://www.exploit-db.com/exploits/18933https://www.vulncheck.com/advisories/quickshare-file-server-path-traversal-rce