CVE-2017-12756
CVE-2017-12756
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter.
CVSS 7.2 · High · EPSS 1.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
extplorer Ubuntu:14.04:LTS
- Versions
- 2.1.0b6+dfsg.3-4
- 2.1.0b6+dfsg.3-4+deb7u1~build0.14.04.1
- 2.1.0b6+dfsg.3-4+deb7u3build0.14.04.1
- 2.1.0b6+dfsg.3-4+deb7u4build0.14.04.1
- Affected ranges
- ECOSYSTEM: < 2.1.0b6+dfsg.3-4+deb7u5build0.14.04.1
Update to 2.1.0b6+dfsg.3-4+deb7u5build0.14.04.1
extplorer Ubuntu:16.04:LTS
- Versions
- 2.1.0b6+dfsg.3-4+deb7u1
- 2.1.0b6+dfsg.3-4+deb7u1ubuntu1
- 2.1.0b6+dfsg.3-4+deb7u3ubuntu0.1
- 2.1.0b6+dfsg.3-4+deb7u4ubuntu0.16.04.1
- Affected ranges
- ECOSYSTEM: < 2.1.0b6+dfsg.3-4+deb7u5ubuntu0.16.04.1
Update to 2.1.0b6+dfsg.3-4+deb7u5ubuntu0.16.04.1