CVE-2023-54335

Summary

eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.

Affected Software

Weaknesses

• CWE-306: Missing Authentication for Critical Function

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://www.exploit-db.com/exploits/51067

References

• https://www.exploit-db.com/exploits/51067
• https://extplorer.net/
• https://www.vulncheck.com/advisories/extplorer-authentication-bypass-remote-code-execution-rce

• ←Previous
• Next→