Skip to content
OpenAdvisories

Vendor

thexerteproject

5 known vulnerabilities.

Products

xerteonlinetoolkits 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-34415 Public exploit

    Xerte Online Toolkits File Upload RCE via elfinder Connector

    Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input validation vulnerability in the elFinder connector endpoint that fails to block PHP-executable extensions .php4 due to an incorrect regex pattern. Unauthenticated attackers can exploi…

    thexerteproject xerteonlinetoolkits