2 matches found
[SECURITY] [DLA 1063-1] extplorer security update
Package : extplorer Version : 2.1.0b6+dfsg.3-4+deb7u5 CVE ID : CVE-2017-12756 CVE-2017-12756 Fix command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile0 parameter. For Debian 7 "Wheezy", these problems have been fixed in...
7.2CVSS7.3AI score0.01165EPSS
SaveExploits0
CVE-2017-12756: Improper Neutralization of Special Elements used in a Command
Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile0 parameter...
7.2CVSS5.9AI score0.01165EPSS
SaveExploits0References2
20