Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2023-54335

eXtplorer<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE)

Description

eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Extplorer eXtplorer

  • 0 to ≤ 2.1.14affected

References