Lucene search
K

CVE-2018-15495

🗓️ 18 Aug 2018 02:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 36 Views🌐 WEB

/filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curl_exec call, as demonstrated by a file:///etc/passwd value

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
CNVD
Responsive FileManager Information Disclosure Vulnerability
21 Aug 201800:00
cnvd
Cvelist
CVE-2018-15495
18 Aug 201802:00
cvelist
EUVD
EUVD-2018-7372
7 Oct 202500:30
euvd
NVD
CVE-2018-15495
18 Aug 201802:29
nvd
Prion
Directory traversal
18 Aug 201802:29
prion
Prion
Server side request forgery (ssrf)
31 Oct 201805:29
prion
NVD
ParameterPositionPathDescriptionCWE
urlquery param/filemanager/upload.phpDirectory Traversal and SSRF via the url parameter used directly in curl_exec, e.g., file:///etc/passwdCWE-22

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 03:50Current
7.8High risk
Vulners AI Score7.8
CVSS 25
CVSS 37.5
EPSS0.00392
36