CVE-2018-15495

2018-08-1802:29:01

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

JSON

/filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curl_exec call, as demonstrated by a file:///etc/passwd value.

CPENameOperatorVersion
responsivefilemanagereq9.9.1
responsivefilemanagereq9.13.0
responsivefilemanagereq9.10.1
responsivefilemanagereq9.9.4
responsivefilemanagereq9.10.2
responsivefilemanagereq9.9
responsivefilemanagereq9.12.1
responsivefilemanagereq9.12.2
responsivefilemanagereq9.9.5
responsivefilemanagereq9.11.3

Name	Operator	Version
responsivefilemanager	eq	9.9.1
responsivefilemanager	eq	9.13.0
responsivefilemanager	eq	9.10.1
responsivefilemanager	eq	9.9.4
responsivefilemanager	eq	9.10.2
responsivefilemanager	eq	9.9
responsivefilemanager	eq	9.12.1
responsivefilemanager	eq	9.12.2
responsivefilemanager	eq	9.9.5
responsivefilemanager	eq	9.11.3