Lucene search
MitreCVELIST:CVE-2018-15535HistoryAug 24, 2018 - 7:00 p.m.
CVE-2018-15535
2018-08-2419:00:00
mitre
www.cve.org
0.969 High
EPSS
Percentile
99.7%
/filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize get_file sequences such as “…” that can resolve to a location that is outside of that directory, aka Directory Traversal.
Related
nvd
nvd
CVE-2018-15535
2018-08-24 19:29:01
cve
cve
CVE-2018-15535
2018-08-24 19:29:01
checkpoint_advisories
checkpoint_advisories
TecRail Responsive Filemanager Directory Traversal (CVE-2018-15535)
2020-06-05 00:00:00
prion
prion
Directory traversal
2018-08-24 19:29:00
osv
osv
CVE-2018-15535
2018-08-24 19:29:01
nuclei
nuclei
Responsive FileManager <9.13.4 - Local File Inclusion
2021-09-09 12:48:08
packetstorm
packetstorm
Responsive FileManager 9.13.4 Path Traversal
2018-08-23 00:00:00
exploitpack
exploitpack
Responsive FileManager 9.13.4 - Directory Traversal
2018-08-27 00:00:00
zdt
zdt
Responsive FileManager < 9.13.4 - Directory Traversal
2018-08-28 00:00:00
exploitdb
exploitdb
Responsive FileManager < 9.13.4 - Directory Traversal
2018-08-27 00:00:00