{"id":"CVE-2023-27842","aliases":["EUVD-2023-31578","GHSA-r9mc-9qw4-qm7r","UBUNTU-CVE-2023-27842"],"status":"published","title":"Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a...","description":"Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02418,"percentile":0.84397,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-277"],"published":"2023-03-21T00:00:00Z","modified":"2026-10-28T02:30:59Z","exploits":[{"source":"pocgithub","id":"cowsecurity/CVE-2023-27842","title":"cowsecurity/CVE-2023-27842","date":"2023-03-25","url":"https://github.com/cowsecurity/CVE-2023-27842"}],"affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"extplorer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.0b6+dfsg.3-4+deb7u1","2.1.0b6+dfsg.3-4+deb7u1ubuntu1","2.1.0b6+dfsg.3-4+deb7u3ubuntu0.1","2.1.0b6+dfsg.3-4+deb7u4ubuntu0.16.04.1","2.1.0b6+dfsg.3-4+deb7u5ubuntu0.16.04.1"]}],"products":[{"vendor":"extplorer","product":"extplorer"}],"references":[{"url":"http://blog.tristaomarinho.com/extplorer-2-1-15-insecure-permissions-following-remote-code-execution/","tags":["x_transferred","Exploit","Third Party Advisory","article"]},{"url":"http://extplorer.net/","tags":["x_transferred","Product","web"]},{"url":"http://extplorer.net/attachments/download/99/eXtplorer_2.1.15.zip","tags":["x_transferred","Product","web"]},{"url":"https://github.com/tristao-marinho/CVE-2023-27842/blob/main/README.md","tags":["x_transferred","Exploit","Third Party Advisory","web"]},{"url":"https://github.com/tristao-marinho/CVE-2023-27842","tags":["x_transferred","Exploit","Third Party Advisory","package"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27842","tags":["advisory"]},{"url":"http://blog.tristaomarinho.com/extplorer-2-1-15-insecure-permissions-following-remote-code-execution"},{"url":"http://extplorer.net"},{"url":"https://github.com/advisories/GHSA-r9mc-9qw4-qm7r"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/27xxx/CVE-2023-27842.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-27842","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27842","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-27842","description":"Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent","status":"published","published":"2023-03-21T00:00:00Z","modified":"2025-02-26T17:11:02.653Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-277"],"updated_at":"2026-11-02T14:35:26.261013Z"}],"euvd":[{"id":"EUVD-2023-31578","description":"Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent","status":"published","published":"2023-03-21T00:00:00Z","modified":"2025-02-26T17:11:02Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:23.257772Z"}],"ghsa":[{"id":"GHSA-r9mc-9qw4-qm7r","title":"Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a...","description":"Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent","status":"published","published":"2023-03-21T15:30:15Z","modified":"2025-02-26T18:31:40Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-277"],"updated_at":"2026-11-02T15:00:03.228993Z"}],"nvd":[{"id":"CVE-2023-27842","description":"Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent","status":"published","published":"2023-03-21T15:15:12.413Z","modified":"2026-06-17T05:45:56.24Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-277"],"updated_at":"2026-11-02T14:07:50.908252Z"}],"osv":[{"id":"CVE-2023-27842","description":"Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent","status":"published","published":"2023-03-21T00:00:00Z","modified":"2026-10-28T02:30:59.113341644Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:31.135751Z"},{"id":"UBUNTU-CVE-2023-27842","description":"Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent","status":"published","published":"2023-03-21T15:15:00Z","modified":"2025-10-24T05:01:52Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.198616Z"}]}}