CVE-2013-5352: Sharetronix

Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary PHP code via the (1) activities_text parameter to services/activities/set or (2) comments_text parameter to services/comments/set, which is not properly handled when executing the preg_replace function with the e modifier.

Affected products

• Sharetronix Sharetronix: up to and including 3.1.1; version 3.1.1.3 only

Published 2014-06-13. Last modified 2026-06-16.