CVE-2013-5951

Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer 2.1.3, when used as a component for Joomla!, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) application.js.php in scripts/ or (2) admin.php, (3) copy_move.php, (4) functions.php, (5) header.php, or (6) upload.php in include/.

• CWE-79

• http://archives.neohapsis.com/archives/fulldisclosure/2014-03/0273.htmlExploit
• http://secunia.com/advisories/57387Vendor Advisory
• http://secunia.com/advisories/57482Vendor Advisory
• http://www.debian.org/security/2014/dsa-2882
• http://www.securityfocus.com/bid/66262
• http://archives.neohapsis.com/archives/fulldisclosure/2014-03/0273.htmlExploit
• http://secunia.com/advisories/57387Vendor Advisory
• http://secunia.com/advisories/57482Vendor Advisory
• http://www.debian.org/security/2014/dsa-2882
• http://www.securityfocus.com/bid/66262

Published

Mar 25, 2014

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-5942Graphite 0.9.5 through 0.9.10 uses the pickle Python module …
• CVE-2013-5943Multiple cross-site scripting (XSS) vulnerabilities in Graph…
• CVE-2013-5944The integrated web server on Siemens SCALANCE X-200 switches…
• CVE-2013-5945Multiple SQL injection vulnerabilities in D-Link DSR-150 wit…9.8
• CVE-2013-5946The runShellCmd function in systemCheck.htm in D-Link DSR-15…
• CVE-2013-5948The Network Analysis tab (Main_Analysis_Content.asp) in the …
• CVE-2013-5952Multiple cross-site scripting (XSS) vulnerabilities in the F…
• CVE-2013-5953Multiple cross-site scripting (XSS) vulnerabilities in tmpl/…
• CVE-2013-5954Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2013-5955Cross-site scripting (XSS) vulnerability in manage.php in th…
• CVE-2013-5956Cross-site scripting (XSS) vulnerability in includes/flvthum…
• CVE-2013-5957Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX…