CVE-2023-54335
Last modified
CVE-2023-54335 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.. EPSS estimates a 4.96% chance of exploitation in the next 30 days.
Description
eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable file management system.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Extplorer | Extplorer | <= 2.1.14 |
References
- https://extplorer.net/Product
- https://www.exploit-db.com/exploits/51067Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/51067Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-54335?
How severe is CVE-2023-54335?
How do I fix CVE-2023-54335?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-5433The Message ticker plugin for WordPress is vulnerable to SQL…6.5
- CVE-2023-54330Inbit Messenger versions 4.6.0 to 4.9.0 contain a remote sta…9.8
- CVE-2023-54331Outline 1.6.0 contains an unquoted service path vulnerabilit…8.5
- CVE-2023-54332Jetpack 11.4 contains a cross-site scripting vulnerability i…6.1
- CVE-2023-54333Social-Share-Buttons 2.2.3 contains a critical SQL injection…8.8
- CVE-2023-54334Explorer32++ 1.3.5.531 contains a buffer overflow vulnerabil…9.8
- CVE-2023-54336Mediconta 3.7.27 contains an unquoted service path vulnerabi…8.5
- CVE-2023-54337Sysax Multi Server 6.95 contains a denial of service vulnera…9.1
- CVE-2023-54338Tftpd32 SE 4.60 contains an unquoted service path vulnerabil…8.5
- CVE-2023-54339Webgrind 1.1 contains a remote command execution vulnerabili…9.8
- CVE-2023-5434The Superb slideshow gallery plugin for WordPress is vulnera…6.5
- CVE-2023-54340WorkOrder CMS 0.1.0 contains a SQL injection vulnerability t…8.8
Are you affected by CVE-2023-54335?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST