CVE-2023-54335(extplorer / extplorer)

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.

extplorer CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Vendor / third-party advisories

https://www.vulncheck.com/advisories/extplorer-authentication-bypass-remote-code-execution-rce

Other references

https://extplorer.net/

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

extplorer

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Affected systems

Vendors

extplorer

Products

extplorer

Deep dive

Activity timeline1 mentions / 1d

Referenced assets1 URL

By indicator

https://cloud.projectdiscovery.io/library/CVE-2023-54335

Full discourse1 post

pdnuclei-bot@pdnuclei_bot16h
🚨 CVE-2023-54335 - critical 🚨 eXtplorer <= 2.1.14 - Authentication Bypass > eXtplorer <= 2.1.14 contains an authentication bypass in ext_find_user() (include/use... 👾 https://cloud.projectdiscovery.io/library/CVE-2023-54335 @pdnuclei #NucleiTemplates #cve
00000117
1.4K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	extplorer	extplorer	-	-	-

Explore more

Back to dashboard extplorer CVEs extplorer vulnerabilities