269 matches found
eXtplorer 2.1.9 - '.ZIP' Directory Traversal
/ + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EXTPLORER-ARCHIVE-PATH-TRAVERSAL.txt + ISR: apparitionsec Vendor: ============== extplorer.net Product: ================== eXtplorer v2.1.9 eXtplorer is a PHP and...
eXtplorer 2.1.9 Path Traversal
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EXTPLORER-ARCHIVE-PATH-TRAVERSAL.txt + ISR: apparitionsec Vendor: ============== extplorer.net Product: ================== eXtplorer v2.1.9 eXtplorer is a PHP and...
Debian DLA-453-1 : extplorer security update
Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has...
[SECURITY] [DLA 453-1] extplorer security update
Package : extplorer Version : 2.1.0b6+dfsg.3-4+deb7u2 CVE ID : CVE-2015-0896 Debian Bug : 783231 Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
DLA-453-1 extplorer - security update
Bulletin has no description...
eXtplorer Cross-Site Request Forgery Vulnerability (CNVD-2015-06704)
eXtplorer is a PHP-based online file management program. A cross-site request forgery vulnerability exists in eXtplorer. It allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the target user...
CVE-2015-5660
Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...
CVE-2015-5660
Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...
UBUNTU-CVE-2015-5660
Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...
CVE-2015-5660
Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...
CVE-2015-5660
Extplorer before 2.1.8 is affected by a Cross‑Site Request Forgery (CSRF) vulnerability that enables an attacker to hijack the authentication of arbitrary users for requests that execute PHP code. The issue, CVE-2015-5660, is documented across multiple sources (NVD, CNVD, Debian DLA, OSV) and res...
PT-2015-7020
Name of the Vulnerable Software and Affected Versions eXtplorer versions prior to 2.1.8 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code. Recommendations For versions prior to 2.1.8, upda...
CVE-2015-5660: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...
eXtplorer vulnerable to cross-site request forgery
Overview eXtplorer is a web-based file manager. index.php of eXtplorer contains a cross-site request forgery CWE-352 vulnerability. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
JVN#92520335: eXtplorer vulnerable to cross-site request forgery
eXtplorer is a web-based file manager. index.php of eXtplorer contains a cross-site request forgery CWE-352 vulnerability. Impact If a user views a malicious page while logged in, the user may be forced to implicitly perform unintended operations such as the execution of arbitrary PHP code...
Extplorer, 2.1.7 and previous
Developer startement eXtplorer 2.1.8 released Today eXtplorer 2.1.8 was released, fixing some minor vulnerabilities. Changelog: - added security functions for protection against CSRF attacks - fixed "directories with the name '0' are not loading" An update is recommended...
Debian DLA-296-1 : extplorer security update
Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has...
[SECURITY] [DLA 296-1] extplorer security update
Package : extplorer Version : 2.1.0b6+dfsg.2-1+squeeze3 CVE ID : CVE-2015-0896 Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...