← All advisories

High severity7.2NVD Advisory· Published Aug 9, 2017· Updated Jun 17, 2026

CVE-2017-12756

CVE-2017-12756

Description

Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter.

Affected products

2

Extplorer/Extplorer2 versions
cpe:2.3:a:extplorer:extplorer:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:extplorer:extplorer:*:*:*:*:*:*:*:*range: <=2.1.9
- (no CPE)range: <=2.1.9

Patches

Vulnerability mechanics

References

1

extplorer.net/news/21nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.