CVE-2017-12761

http://codecanyon.net/user/Endober WebFile Explorer 1.0 is affected by: SQL Injection. The impact is: Arbitrary File Download (remote). The component is: $file = $_GET['id'] in download.php. The attack vector is: http://speicher.example.com/envato/codecanyon/demo/web-file-explorer/download.php?id=WebExplorer/../config.php.

• CWE-89

• http://codecanyon.net/user/EndoberNot Applicable, Third Party Advisory
• http://speicher.example.com/envato/codecanyon/demo/web-file-explorer/download.php?id=WebExplorer/../config.phpBroken Link, Third Party Advisory
• http://webfile.comThird Party Advisory
• https://www.exploit-db.com/exploits/42440Exploit, Third Party Advisory, VDB Entry
• http://codecanyon.net/user/EndoberNot Applicable, Third Party Advisory
• http://speicher.example.com/envato/codecanyon/demo/web-file-explorer/download.php?id=WebExplorer/../config.phpBroken Link, Third Party Advisory
• http://webfile.comThird Party Advisory
• https://www.exploit-db.com/exploits/42440Exploit, Third Party Advisory, VDB Entry

Published

May 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12756Command inject in transfer from another server in extplorer …
• CVE-2017-12757Certain Ambit Technologies Pvt. Ltd products are affected by…
• CVE-2017-12758https://www.joomlaextensions.co.in/ Joomla! Component Appoin…
• CVE-2017-12759Ynet Interactive - http://demo.ynetinteractive.com/soa/ SOA …
• CVE-2017-1276IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vuln…
• CVE-2017-12760Ynet Interactive - http://demo.ynetinteractive.com/mobiketa/…
• CVE-2017-12762In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is…9.8
• CVE-2017-12763An unspecified server utility in NoMachine before 5.3.10 on …
• CVE-2017-1277IBM Rational Quality Manager and IBM Rational Collaborative …5.4
• CVE-2017-12774finecms in 1.9.5\controllers\member\ContentController.php al…
• CVE-2017-12775qa-include/qa-install.php in Question2Answer before 1.7.5 al…
• CVE-2017-12776SQL injection vulnerability in reports.php in NexusPHP 1.5 a…