CVE-2013-6227

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-12-27 · updated 2026-06-17

Description

Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to execute arbitrary code by uploading an executable file, and then accessing this file at a location specified by the format parameter of a move operation.

Affected products

AjaXplorer: through 5.0.3
Pydio: through 5.0.3

References

http://pyd.io/pydio-core-5-0-4/
http://www.redfsec.com/CVE-2013-6227
https://www.exploit-db.com/exploits/46206/
http://pyd.io/pydio-core-5-0-4/
http://www.redfsec.com/CVE-2013-6227
https://www.exploit-db.com/exploits/46206/

Get alerted when CVE-2013-6227 or the next vulnerability affects your stack