CVE-2011-10010Disclosure

LOWCVSS 9.4 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

QuickShare File Server 1.2.1 contains a path traversal vulnerability in its FTP service due to improper sanitation of user-supplied file paths. Authenticated users can exploit this flaw by submitting crafted sequences to access or write files outside the intended virtual directory. When the "Writable" option is enabled (default during account creation), this allows attackers to upload arbitrary files to privileged locations such as system32, enabling remote code execution via MOF injection or executable placement.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://zerodaysignal.com/vulnerability/CVE-2011-10010

Full discourse1 post

0day Signal@0dayPublishing186d
Disclosure
🚨 CVE-2011-10010: QuickShare File Server 1.2.1 Pat... FTP path traversal + default writable config = instant system32 access for MOF injection attacks against any Windows bo... https://zerodaysignal.com/vulnerability/CVE-2011-10010 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet discloses CVE-2011-10010, describing an FTP path traversal that allows default writable config and instant system32 access for MOF injection. No PoC, exploit code, or patch details are provided.
0000034
204 followersView on X

Explore more

Back to dashboard