Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. (dot dot) in an archive file.
oryginał ENCVSS Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExtplorer
APPExtplorer2.1.9
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Path Traversal
CWE
Referencje
Powiązane podatności
CVE-2023-54335CRITICAL9.3PL ✓ten sam produkt
Authentication bypass i RCE w eXtplorer 2.1.14
CVE-2012-6710CRITICAL9.8ten sam produkt
ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (a...
CVE-2023-29657HIGH8.8ten sam produkt
eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file ...
CVE-2023-27842HIGH8.8ten sam produkt
Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker...
CVE-2017-12756HIGH7.2ten sam produkt
Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command ...