CWE Code: 89
Vulnerability Type: sql_injection
CVSS Score: 5.0
CWE Name:  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Summary: http://codecanyon.net/user/endober webfile explorer 1.0 is affected by: sql injection. the impact is: arbitrary file download (remote). the component is: $file = $_get['id'] in download.php. the attack vector is: http://speicher.example.com/envato/codecanyon/demo/web-file-explorer/download.php?id=webexplorer/../config.php.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2019-05-09
Last Modified Date: 2019-05-10