JVN#64451600: Tablacus Explorer vulnerable to script injection

Tablacus Explorer is a tabbled file manager. Tablacus Explorer contains a script injection vulnerability due to improper handling of directory names.

Impact

When a user accesses a crafted directory, an arbitrary script may be executed on Tablacus Explorer. As a result, an arbitrary OS command may be executed with the privilege of Tablacus Explorer.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Tablacus Explorer 17.3.30 and earlier