Description
QuickShare File Server 1.2.1 contains a path traversal vulnerability in its FTP service due to improper sanitation of user-supplied file paths. Authenticated users can exploit this flaw by submitting crafted sequences to access or write files outside the intended virtual directory. When the "Writable" option is enabled (default during account creation), this allows attackers to upload arbitrary files to privileged locations such as system32, enabling remote code execution via MOF injection or executable placement.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QuickShareHQ | QuickShare File Server | < 1.2.2 | 1.2.2 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
QuickShare File Server 1.2.1 Directory Traversal Vulnerability
exploit/windows/ftp/quickshare_traversal_write
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/quickshare_traversal_write.rb exploit
- https://www.exploit-db.com/exploits/16105 exploit
- https://www.exploit-db.com/exploits/18933 exploit
- https://web.archive.org/web/20110814125645/http://www.digital-echidna.org/2011/02/quickshare-file-share-1-2-1-directory-traversal-vulnerability/ technical-description exploit
- https://web.archive.org/web/20120125101026/http://www.quicksharehq.com/blog/quickshare-file-server-1-2-2-released.html vendor-advisory patch
- https://www.vulncheck.com/advisories/quickshare-file-server-path-traversal-rce third-party-advisory