CVE-2013-1642

Multiple cross-site scripting (XSS) vulnerabilities in QuiXplorer before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via the (1) dir, (2) item, (3) order, (4) searchitem, (5) selitems[], or (6) srt parameter to index.php or (7) the QUERY_STRING to index.php.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/89056Third Party Advisory, VDB Entry
• https://github.com/realtimeprojects/quixplorerProduct, Third Party Advisory
• https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-030.txtExploit, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89056Third Party Advisory, VDB Entry
• https://github.com/realtimeprojects/quixplorerProduct, Third Party Advisory
• https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-030.txtExploit, Third Party Advisory

Published

Jan 2, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-1636Cross-site scripting (XSS) vulnerability in open-flash-chart…
• CVE-2013-1637Opera before 12.13 allows remote attackers to execute arbitr…
• CVE-2013-1638Opera before 12.13 allows remote attackers to execute arbitr…
• CVE-2013-1639Opera before 12.13 does not send CORS preflight requests in …
• CVE-2013-1640The (1) template and (2) inline_template functions in the ma…
• CVE-2013-1641Directory traversal vulnerability in the zip download functi…
• CVE-2013-1643The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13…
• CVE-2013-1645Directory traversal vulnerability in Open-Xchange Server bef…
• CVE-2013-1646Multiple cross-site scripting (XSS) vulnerabilities in Open-…
• CVE-2013-1647Multiple CRLF injection vulnerabilities in Open-Xchange Serv…
• CVE-2013-1648The Subscriptions feature in Open-Xchange Server before 6.20…
• CVE-2013-1649Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13…