Approved changes feed: RSS · Atom

cpe:2.3:a:extplorer:extplorer:2.1.3:*:*:*:*:*:*:*

part: a version: 2.1.3 update: *

VendorExtplorer (d70c2daa-f648-5212-b726-af2438361654)
ProductExtplorer (0b7eb563-eb1a-5c0a-90e6-aed5dd52bbb1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/soerennb/extplorer purl2cpe 2026-06-01 10:11:41.925963
pkg:sourceforge/extplorer purl2cpe 2026-06-01 10:11:41.925964

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5951 vulnerable 2026-06-08 05:04:54.817221 Details available
Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer 2.1.3, when used as a component for Joomla!, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) application.js.php in scripts/ or (2) admin.php, (3) copy_move.php, (4) functions.php, (5) header.php, or (6) upload.php in include/.
Published: 2014-03-25T15:00:00.000Z
Updated: 2024-08-06T17:29:41.661Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.