Lucene search

CVE-2018-15495

🗓️ 18 Aug 2018 02:01:29Reported by mitreType

cve🔗 web.nvd.nist.gov👁 27 Views🌐 WEB

/filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curl_exec call, as demonstrated by a file:///etc/passwd value

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
Prion	Directory traversal	18 Aug 201802:29	–	prion
Prion	Server side request forgery (ssrf)	31 Oct 201805:29	–	prion
NVD	CVE-2018-15495	18 Aug 201802:29	–	nvd
NVD	CVE-2018-18867	31 Oct 201805:29	–	nvd
OSV	CVE-2018-15495	18 Aug 201802:29	–	osv
OSV	CVE-2018-18867	31 Oct 201805:29	–	osv
Cvelist	CVE-2018-15495	18 Aug 201802:00	–	cvelist
Cvelist	CVE-2018-18867	31 Oct 201805:00	–	cvelist
CVE	CVE-2018-18867	31 Oct 201805:29	–	cve

Nvd

Node

tecrail responsive_filemanagerRange<9.13.3

Source	Link
seclists	www.seclists.org/fulldisclosure/2018/Aug/9
github	www.github.com/trippo/ResponsiveFilemanager/blob/master/changelog.txt

Parameter	Position	Path	Description	CWE
url	query param	/filemanager/upload.php	Directory Traversal and SSRF vulnerability allowing access to local files.	CWE-22

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Aug 2018 02:29Current

7.8High risk

Vulners AI Score7.8

CVSS25

CVSS37.5

EPSS0.00421

CWE-22