CVE-2023-54335 | Critical | 9.8 | 2026-01-13 | eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers… |
CVE-2025-13058 | Low | 3.5 | 2025-11-12 | A security flaw has been discovered in soerennb eXtplorer up to 2.1.15. The affected element is an unknown function of the component Filename Handler. The mani… |
CVE-2023-40628 | Medium | 6.1 | 2023-12-14 | A reflected XSS vulnerability was discovered in the Extplorer component for Joomla. |
CVE-2023-29657 | High | 8.8 | 2023-05-12 | eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executio… |
CVE-2023-27842 | High | 8.8 | 2023-03-21 | Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php comp… |
CVE-2019-25098 | Medium | 5.5 | 2023-01-05 | A vulnerability was found in soerennb eXtplorer up to 2.1.12. It has been classified as critical. This affects an unknown part of the file include/archive.php… |
CVE-2019-25097 | Medium | 5.5 | 2023-01-05 | A vulnerability was found in soerennb eXtplorer up to 2.1.12 and classified as critical. Affected by this issue is some unknown functionality of the component… |
CVE-2019-25096 | Low | 3.5 | 2023-01-05 | A vulnerability has been found in soerennb eXtplorer up to 2.1.12 and classified as problematic. Affected by this vulnerability is an unknown functionality. Th… |
CVE-2019-7305 | Medium | 5.8 | 2020-04-10 | Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile p… |
CVE-2012-6710 | Critical | 9.8 | 2018-10-07 | ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to… |
CVE-2017-12756 | High | 7.2 | 2017-08-09 | Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter. |
CVE-2016-4313 | High | 7.8 | 2017-04-24 | Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. (dot dot) in an archi… |
CVE-2015-5660 | | | 2015-10-16 | Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests… |
CVE-2015-0896 | | | 2015-03-18 | Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vec… |
CVE-2013-5951 | | | 2014-03-25 | Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer 2.1.3, when used as a component for Joomla!, allow remote attackers to inject arbitrary web sc… |
CVE-2012-3454 | | | 2012-08-07 | eXtplorer 2.1.0b6 uses world writable permissions for the /var/lib/extplorer/ftp_tmp directory, which allows local users to delete or overwrite arbitrary files. |
CVE-2012-3362 | | | 2012-07-12 | Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for req… |
CVE-2008-4764 | | | 2008-10-28 | Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remote attackers to read arbitrary files via… |