cve/2016/CVE-2016-4313.md

CVE-2016-4313

Description

Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. (dot dot) in an archive file.

POC

Reference

• http://packetstormsecurity.com/files/137031/eXtplorer-2.1.9-Path-Traversal.html
• https://www.exploit-db.com/exploits/39816/

Github

• https://github.com/ARPSyndicate/cvemon