CVE-2013-4267

Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) archive_name parameter to the Power FS module (plugins/action.powerfs/class.PowerFSController.php), a (2) file name to the getTrustSizeOnFileSystem function in the File System (Standard) module (plugins/access.fs/class.fsAccessWrapper.php), or the (3) revision parameter to the Subversion Repository module (plugins/meta.svn/class.SvnManager.php).

• CWE-78

• http://www.openwall.com/lists/oss-security/2013/08/21/16Mailing List, Third Party Advisory
• https://github.com/pydio/pydio-core/commit/22a62840e5ac14bb389Patch, Third Party Advisory
• https://www.tenable.com/plugins/nessus/70495Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/08/21/16Mailing List, Third Party Advisory
• https://github.com/pydio/pydio-core/commit/22a62840e5ac14bb389Patch, Third Party Advisory
• https://www.tenable.com/plugins/nessus/70495Third Party Advisory

Published

Feb 11, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4261OpenStack Compute (Nova) Folsom, Grizzly, and earlier, when …
• CVE-2013-4262svnwcsub.py in Subversion 1.8.0 before 1.8.3, when using the…
• CVE-2013-4263libavfilter in FFmpeg before 2.0.1 has unspecified impact an…
• CVE-2013-4264The kempf_decode_tile function in libavcodec/g2meet.c in FFm…
• CVE-2013-4265The av_reallocp_array function in libavutil/mem.c in FFmpeg …
• CVE-2013-4266Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-4268Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-4269Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-4270The net_ctl_permissions function in net/sysctl_net.c in the …
• CVE-2013-4271The default configuration of the ObjectRepresentation class …
• CVE-2013-4272The BOTCHA Spam Prevention module 7.x-1.x before 7.x-1.6, 7.…
• CVE-2013-4273The Entity API module 7.x-1.x before 7.x-1.2 for Drupal does…