CVE-2023-29657
https://notcve.org/view.php?id=CVE-2023-29657
eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions. • http://blog.tristaomarinho.com/extplorer-2-1-15-arbitrary-file-upload http://extplorer.net • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVE-2023-27842
https://notcve.org/view.php?id=CVE-2023-27842
Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent • https://github.com/cowsecurity/CVE-2023-27842 https://github.com/tristao-marinho/CVE-2023-27842 http://blog.tristaomarinho.com/extplorer-2-1-15-insecure-permissions-following-remote-code-execution http://extplorer.net http://extplorer.net/attachments/download/99/eXtplorer_2.1.15.zip https://github.com/tristao-marinho/CVE-2023-27842/blob/main/README.md •