CVE-2016-4313 Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. (dot dot) in an archive file.
HighCVSS 7.8
EPSS 8.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. (dot dot) in an archive file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| extplorer | = 2.1.9 | No fix listed |
References
- hyp3rlinx.altervista.org exploit
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20160514 eXtplorer v2.1.9 Archive Path Traversal mailing-list
- 98069 vdb-entry
- 39816 exploit third-party-advisory vdb-entry