CVE-2011-10010

CVE-2011-10010 describes a critical path traversal vulnerability in QuickShare File Server 1.2.1's FTP service. Authenticated users can exploit improper input sanitation to access or write files outside their designated virtual directory. With the default "Writable" option enabled, this flaw allows attackers to upload arbitrary files to privileged system locations, potentially leading to remote code execution via MOF injection or executable placement. This vulnerability carries a CVSS score of 9.4 (CRITICAL) due to its network attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While not currently on CISA's KEV catalog, a Metasploit module exists, and the vulnerability has garnered significant community discussion, indicating active interest in its exploitation.