CVE-2018-20790

2019-02-2506:29:00

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

JSON

tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass through the delete_file action in execute.php.

CPENameOperatorVersion
responsivefilemanagereq9.12.2
responsivefilemanagereq9.13.3
responsivefilemanagereq9.10.0
responsivefilemanagereq9.9
responsivefilemanagereq9.13.4
responsivefilemanagereq9.9.4
responsivefilemanagereq9.10.1
responsivefilemanagereq9.9.5
responsivefilemanagereq9.11.3
responsivefilemanagereq9.9.1

Name	Operator	Version
responsivefilemanager	eq	9.12.2
responsivefilemanager	eq	9.13.3
responsivefilemanager	eq	9.10.0
responsivefilemanager	eq	9.9
responsivefilemanager	eq	9.13.4
responsivefilemanager	eq	9.9.4
responsivefilemanager	eq	9.10.1
responsivefilemanager	eq	9.9.5
responsivefilemanager	eq	9.11.3
responsivefilemanager	eq	9.9.1

Rows per page:

1-10 of 211

References

www.exploit-db.com/exploits/45987