CVE-2023-54335

CRITICAL

9.8

Descricao

eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado1/13/2026

Ultima modificacao2/3/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

extplorer:extplorer

Fraquezas (CWE)

CWE-306

Referencias

https://extplorer.net/(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/51067(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/extplorer-authentication-bypass-remote-code-execution-rce(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/51067(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.