CVE-2013-5951

LOW 2.6CVE-2013-5951 · Published 25/03/2014 · updated 16/06/2026

In short

CVE-2013-5951 is a LOW (CVSS 2.6) vulnerability affecting extplorer (extplorer).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 80.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
extplorer extplorer	`= 2.1.3`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer 2.1.3, when used as a component for Joomla!, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) application.js.php in scripts/ or (2) admin.php, (3) copy_move.php, (4) functions.php, (5) header.php, or (6) upload.php in include/.

References

archives.neohapsis.com/archives/fulldisclosure/2014-03/0273.html · Exploit
secunia.com/advisories/57387 · Vendor Advisory
secunia.com/advisories/57482 · Vendor Advisory
debian.org/security/2014/dsa-2882
securityfocus.com/bid/66262

More vulnerabilities in extplorer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

extplorer

= 2.1.3

No fix yet

Description

More vulnerabilities in extplorer

See all →