eXtplorer Changelog

What's new in eXtplorer 2.1.7

Feb 15, 2015
  • fixed SWFUpload against XSS vulnerabilities
  • fixed XSS vulnerability in file list

New in eXtplorer 2.1.5 (Jan 4, 2014)

  • This release fixes a vulnerability that allowed to access eXtplorer installations in Joomla! via the standalone interface bypassing the Joomla! authentication. Please update immediately if you're running eXtplorer in Joomla!

New in eXtplorer 2.1.3 (Sep 24, 2013)

  • Versions 2.1.2, 2.1.1, 2.1.0 and 2.1.0RC5 have found to be vulnerable to an authentication bypass bug.
  • This bug has been fixed in the latest release of eXtplorer (2.1.3), which you should download and install/upgrade immediately!
  • If you just want a quick fix, please download the attached file called users.php and put it into the eXtplorer subfolder "/include", in Joomla! installations it can be found under "/administrator/components/com_extplorer/include". Just replace the existing file with this new one.