CVE-2023-27842 | BDVDB-2026-197826 Detail
Description#
Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-277 Insecure Inherited Permissions
References#
- http://blog.tristaomarinho.com/extplorer-2-1-15-insecure-permissions-following-remote-code-execution/
- http://extplorer.net/
- http://extplorer.net/attachments/download/99/eXtplorer_2.1.15.zip
- https://github.com/tristao-marinho/CVE-2023-27842/blob/main/README.md
- https://github.com/tristao-marinho/CVE-2023-27842
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.