Published: 25/03/2014 Updated: 31/12/2016

CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9

VMScore: 231

Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer 2.1.3, when used as a component for Joomla!, allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to (1) application.js.php in scripts/ or (2) admin.php, (3) copy_move.php, (4) functions.php, (5) header.php, or (6) upload.php in include/.

Vulnerable Product	Search on Vulmon	Subscribe to Product
extplorer extplorer 2.1.3

Multiple cross-site scripting (XSS) vulnerabilities have been discovered in extplorer, a web file explorer and manager using Ext JS A remote attacker can inject arbitrary web script or HTML code via a crafted string in the URL to applicationjsphp, adminphp, copy_movephp, functionsphp, headerphp and uploadphp For the oldstable distribution ...

CWE-79 http://archives.neohapsis.com/archives/fulldisclosure/2014-03/0273.html http://www.debian.org/security/2014/dsa-2882 http://secunia.com/advisories/57387 http://secunia.com/advisories/57482 http://www.securityfocus.com/bid/66262 https://nvd.nist.gov https://www.debian.org/security/./dsa-2882

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-5951

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect