[SECURITY] [DLA 1063-1] extplorer security update

Package : extplorer Version : 2.1.0b6+dfsg.3-4+deb7u5 CVE ID : CVE-2017-12756 CVE-2017-12756 Fix command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile0 parameter. For Debian 7 "Wheezy", these problems have been fixed in...

CVE-2017-12756: Improper Neutralization of Special Elements used in a Command

Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile0 parameter...

PT-2017-12679

Name of the Vulnerable Software and Affected Versions extplorer versions 2.1.9 and prior Description The issue allows an attacker to inject commands via the userfile0 parameter when transferring from another server. This can be exploited by sending malicious input to the vulnerable parameter...