Browse CVEs

CRITICAL 9.8 CVE-2023-54335EPSS 5% eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request.… Extplorer after 2.1.14 Fix from $2,3002026-01-13 MEDIUM 5.4 CVE-2025-13058 A security flaw has been discovered in soerennb eXtplorer up to 2.1.15. The affected element is an unknown function of the component Filename Handler… Extplorer after 2.1.15 Fix from $1,6002025-11-12 MEDIUM 6.1 CVE-2023-40628 A reflected XSS vulnerability was discovered in the Extplorer component for Joomla. Extplorer after 2.1.5 Fix from $1,6002023-12-14 HIGH 8.8 CVE-2023-29657 eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary cod… Extplorer No fix yet Fix from $1,9502023-05-12 HIGH 8.8 CVE-2023-27842 Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the inde… Extplorer No fix yet Fix from $1,9502023-03-21 CRITICAL 9.8 CVE-2019-25097 A vulnerability was found in soerennb eXtplorer up to 2.1.12 and classified as critical. Affected by this issue is some unknown functionality of the … Extplorer 2.1.13+ Fix from $2,3002023-01-05 CRITICAL 9.8 CVE-2019-25098 A vulnerability was found in soerennb eXtplorer up to 2.1.12. It has been classified as critical. This affects an unknown part of the file include/ar… Extplorer 2.1.13+ Fix from $2,3002023-01-05 MEDIUM 6.1 CVE-2019-25096 A vulnerability has been found in soerennb eXtplorer up to 2.1.12 and classified as problematic. Affected by this vulnerability is an unknown functio… Extplorer 2.1.13+ Fix from $1,6002023-01-05 CRITICAL 9.8 CVE-2019-7305 Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the … Extplorer after 2.1.0 Fix from $2,3002020-04-10 CRITICAL 9.8 CVE-2012-6710EPSS 25% ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login r… Extplorer after 2.1.2 Fix from $2,3002018-10-07 HIGH 7.2 CVE-2017-12756 Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter. Extplorer after 2.1.9 Fix from $1,9502017-08-09 HIGH 7.8 CVE-2016-4313EPSS 9% Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. (dot dot) i… Extplorer No fix yet Fix from $1,9502017-04-24 MEDIUM 6.8 CVE-2015-5660 Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for… Extplorer after 2.1.7 Fix from $1,6002015-10-16 MEDIUM 6.8 CVE-2012-3362 Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrato… Extplorer after 2.1.0 Fix from $1,6002012-07-12 MEDIUM 5.0 CVE-2008-4764EPSS 17% Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remote attackers to read arbitrary … Com Extplorer after 2.0.0 Fix from $1,6002008-10-28