CVE-2023-54335
CVE-2023-54335 · eXtplorer<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.
CVSS 9.3 · Critical · EPSS 13.7% · Public exploit
- Published
- Updated
Stack: system
Affected products and versions
extplorer
- Versions
- ≥ 0, ≤ 2.1.14: Affected (semver)
No fix published
extplorer Ubuntu:16.04:LTS
- Versions
- 2.1.0b6+dfsg.3-4+deb7u1
- 2.1.0b6+dfsg.3-4+deb7u1ubuntu1
- 2.1.0b6+dfsg.3-4+deb7u3ubuntu0.1
- 2.1.0b6+dfsg.3-4+deb7u4ubuntu0.16.04.1
- 2.1.0b6+dfsg.3-4+deb7u5ubuntu0.16.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published