Skip to content
OpenAdvisories
High · 8.8 CVE-2023-29657 EUVD-2023-33197GHSA-9337-wvr6-wx8x

eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arb…

Published May 12, 2023 · Updated Jan 24, 2025 · Assigned by mitre

Description

eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS extplorer No fix yet —

References