Vulnerability Description
eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Extplorer | Extplorer | <= 2.1.14 |
Related Weaknesses (CWE)
References
- https://extplorer.net/Product
- https://www.exploit-db.com/exploits/51067ExploitThird Party Advisory
- https://www.vulncheck.com/advisories/extplorer-authentication-bypass-remote-codeThird Party Advisory
- https://www.exploit-db.com/exploits/51067ExploitThird Party Advisory
FAQ
What is CVE-2023-54335?
CVE-2023-54335 is a vulnerability with a CVSS score of 9.8 (CRITICAL). eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload maliciou...
How severe is CVE-2023-54335?
CVE-2023-54335 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-54335?
Check the references section above for vendor advisories and patch information. Affected products include: Extplorer Extplorer.