eXtplorer Authentication Bypass and Remote Code Execution Vulnerability

An authentication bypass vulnerability has been identified in eXtplorer version 2.1.14, allowing attackers to log in without a password by manipulating the login request. This vulnerability can be exploited to upload malicious PHP files and execute remote commands on the affected file management system.

Impact

Exploitation of this vulnerability allows for unauthorized access to the admin panel and the ability to execute remote commands on the server via uploaded malicious PHP files.

Reproduction

To reproduce this vulnerability, intercept the login POST request to 'index.php' and remove the 'password' field before sending the request. Once logged in, upload a PHP file through the file management system which can then be executed remotely.