eXtplorer Cross-Site Request Forgery Vulnerability (CNVD-2015-06704)

eXtplorer is a PHP-based online file management program. A cross-site request forgery vulnerability exists in eXtplorer. It allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in the context of the target user...

CVE-2015-5660

Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...

CVE-2015-5660

Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...

UBUNTU-CVE-2015-5660

Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...

CVE-2015-5660

Cross-site request forgery CSRF vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code...

CVE-2015-5660

Extplorer before 2.1.8 is affected by a Cross‑Site Request Forgery (CSRF) vulnerability that enables an attacker to hijack the authentication of arbitrary users for requests that execute PHP code. The issue, CVE-2015-5660, is documented across multiple sources (NVD, CNVD, Debian DLA, OSV) and res...

eXtplorer vulnerable to cross-site request forgery

Overview eXtplorer is a web-based file manager. index.php of eXtplorer contains a cross-site request forgery CWE-352 vulnerability. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#92520335: eXtplorer vulnerable to cross-site request forgery

eXtplorer is a web-based file manager. index.php of eXtplorer contains a cross-site request forgery CWE-352 vulnerability. Impact If a user views a malicious page while logged in, the user may be forced to implicitly perform unintended operations such as the execution of arbitrary PHP code...

Extplorer, 2.1.7 and previous

Developer startement eXtplorer 2.1.8 released Today eXtplorer 2.1.8 was released, fixing some minor vulnerabilities. Changelog: - added security functions for protection against CSRF attacks - fixed "directories with the name '0' are not loading" An update is recommended...

Debian DLA-296-1 : extplorer security update

Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has...

[SECURITY] [DLA 296-1] extplorer security update

Package : extplorer Version : 2.1.0b6+dfsg.2-1+squeeze3 CVE ID : CVE-2015-0896 Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

DLA-296-1 extplorer - security update

Bulletin has no description...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The extplorer package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Multiple Cross-Site Scripting Vulnerabilities in eXtplorer

eXtplorer is based on PHP and Javascript file manager . Multiple cross-site scripting vulnerabilities exist in versions prior to eXtplorer 2.1.7, which can be exploited by remote attackers to inject arbitrary web script or HTML...

CVE-2015-0896

Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0896

Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

UBUNTU-CVE-2015-0896

Multiple cross-site scripting XSS vulnerabilities in eXtplorer before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0896

CVE-2015-0896 affects eXtplorer, a PHP/JavaScript-based file manager. Multiple XSS vulnerabilities exist in versions before 2.1.7, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue is documented across multiple advisories (e.g., Debian DLA-296-1/4...