PT-2019-7913 · Envato · Web File Explorer

Publicado 2019-05-09 · Atualizado 2019-05-10 · CVE-2017-12761

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WebFile Explorer version 1.0

Description The issue allows for Arbitrary File Download remotely. It is related to a SQL Injection vulnerability. The component download.php is affected, specifically the variable $file = $ GET['id']. The attack vector is through the endpoint "http://speicher.example.com/envato/codecanyon/demo/web-file-explorer/download.php?id=WebExplorer/../config.php".

Recommendations For WebFile Explorer version 1.0, consider restricting access to the download.php component to minimize the risk of exploitation. Avoid using the id variable in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2017-12761

Produtos afetados

Web File Explorer

Referências · 6

• 🔥 https://exploit-db.com/exploits/42440 · Exploit
• http://codecanyon.net/user/Endober · Nota
• https://osv.dev/vulnerability/CVE-2017-12761 · Aviso do Fabricante
• http://speicher.example.com/envato/codecanyon/demo/web-file-explorer/download.php?id=WebExplorer/../config.php · Nota
• http://webfile.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-12761 · Nota de Segurança