QuickShare File Server 1.2.1 Path Traversal RCE
63Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 9.4epss 1.6%
da publicação à arma0 dias
Publicada no NVD13 de ago.
metasploit3 de fev.
probabilidade de exploração
1.6%top 27% das CVEs
exploração observada
nãonenhuma fonte reporta
4 exploit(s) público(s)
QuickShare File Server 1.2.1 contains a path traversal vulnerability in its FTP service due to improper sanitation of user-supplied file paths. Authenticated users can exploit this flaw by submitting crafted sequences to access or write files outside the intended virtual directory. When the "Writable" option is enabled (default during account creation), this allows attackers to upload arbitrary files to privileged locations such as system32, enabling remote code execution via MOF injection or executable placement.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Produtos afetados
QuickShareHQ · QuickShare File ServerPoCs públicas encontradas — 4
cve_referenceraw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/quickshare_traversal_write.rbnão verificadocve_referenceweb.archive.org/web/20110814125645/http://www.digital-echidna.org/2011/02/quickshare-file-share-1-2-1-directory-traversal-vulnerability/não verificadocve_referencewww.exploit-db.com/exploits/16105não verificadocve_referencewww.exploit-db.com/exploits/18933não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/quickshare_traversal_write.rbhttps://web.archive.org/web/20110814125645/http://www.digital-echidna.org/2011/02/quickshare-file-share-1-2-1-directory-traversal-vulnerability/https://web.archive.org/web/20120125101026/http://www.quicksharehq.com/blog/quickshare-file-server-1-2-2-released.htmlhttps://www.exploit-db.com/exploits/16105https://www.exploit-db.com/exploits/18933https://www.vulncheck.com/advisories/quickshare-file-server-path-traversal-rce