exploit/multi/http/extplorer_upload_exec

weaponized

eXtplorer v2.1 Arbitrary File Upload Vulnerability

view exploit source metasploittype exploitpublished 2012-12-31catalog metasploit
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2012-6710UScritical9.8Exploit
ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to index.php.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan