/Vulnerability Library

eXtplorer <= 2.1.14 - Authentication Bypass

CVE-2023-54335
Early Release

Description

eXtplorer <= 2.1.14 contains an authentication bypass in ext_find_user() (include/users.php). When the `password` POST field is omitted entirely, the password is NULL and the function returns the matching user record without checking any password. With the default "admin" account, an unauthenticated attacker can log in as administrator.

Severity

Critical

CVSS Score

9.8

Affected Product

extplorer

Published Date

October 27, 2026

Template Author

securin

CVE-2023-54335.yaml
9.8Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2023-54335
CWE ID:
cwe-287

References

https://www.exploit-db.com/exploits/51067https://github.com/soerennb/extplorer/blob/v2.1.14/include/users.phphttps://nvd.nist.gov/vuln/detail/CVE-2023-54335

Remediation Steps

Upgrade to a patched eXtplorer release in which ext_find_user() requires a non-null password.