CVE-2017-12756

Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2017-08-09

Last modified

2024-08-05

Weaknesses

CWE-77

Affected products

• Extplorer (Extplorer)

References

• http://extplorer.net/news/21