Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pf5x-rfqf-hx7w

Опубликовано: 14 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.3
CVSS3: 9.8

Описание

eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.

eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.

EPSS

Процентиль: 25%
0.00088
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 9.8
ubuntu
25 дней назад

eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.

CVSS3: 9.8
nvd
25 дней назад

eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.

CVSS3: 9.8
debian
25 дней назад

eXtplorer 2.1.14 contains an authentication bypass vulnerability that ...

EPSS

Процентиль: 25%
0.00088
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-306