Hash: SHA512

Package        : extplorer
Version        : 2.1.0b6+dfsg.3-4+deb7u5
CVE ID         : CVE-2017-12756


CVE-2017-12756
      Fix command inject in transfer from another server in extplorer
      2.1.9 and prior allows attacker to inject command via the
      userfile[0] parameter.


For Debian 7 "Wheezy", these problems have been fixed in version
2.1.0b6+dfsg.3-4+deb7u5.

We recommend that you upgrade your extplorer packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Debian LTS: DLA-1063-1: extplorer security update

August 21, 2017
CVE-2017-12756 Fix command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the

Summary

CVE-2017-12756
Fix command inject in transfer from another server in extplorer
2.1.9 and prior allows attacker to inject command via the
userfile[0] parameter.


For Debian 7 "Wheezy", these problems have been fixed in version
2.1.0b6+dfsg.3-4+deb7u5.

We recommend that you upgrade your extplorer packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS




Severity
Package : extplorer
Version : 2.1.0b6+dfsg.3-4+deb7u5
CVE ID : CVE-2017-12756

Related News