CVE-2012-6710
23Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 25%
from disclosure to weapon0 days
Published on NVDOct 7
metasploitDec 31
exploitation probability
25%top 2% of all CVEs
observed exploitation
nono source reports it
ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empty array) in an action=login request to index.php.
Affected products
n/a · n/a