CVE-2023-27842

This repository contains a functional exploit for CVE-2023-27842, targeting eXtplorer 2.1.15. The exploit authenticates to a Joomla-based website with eXtplorer installed, uploads a PHP webshell, and executes arbitrary commands.

This PoC demonstrates an authenticated remote code execution (RCE) vulnerability in eXtplorer 2.1.15 by exploiting insecure file permissions to modify the index.php file and inject malicious PHP code.

This PoC demonstrates an authenticated remote code execution (RCE) vulnerability in eXtplorer 2.1.15 by leveraging insecure file permissions to modify the index.php file and inject malicious PHP code. The attacker can then execute arbitrary system commands via a crafted GET parameter.