CVE-2018-20792

2019-02-2506:29:00

Google

osv.dev

7 High

AI Score

Confidence

High

0.045 Low

EPSS

Percentile

92.5%

JSON

tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through the get_file action in ajax_calls.php.

CPENameOperatorVersion
responsivefilemanagereq9.12.2
responsivefilemanagereq9.13.3
responsivefilemanagereq9.10.0
responsivefilemanagereq9.9
responsivefilemanagereq9.13.4
responsivefilemanagereq9.9.4
responsivefilemanagereq9.10.1
responsivefilemanagereq9.9.5
responsivefilemanagereq9.11.3
responsivefilemanagereq9.9.1

Name	Operator	Version
responsivefilemanager	eq	9.12.2
responsivefilemanager	eq	9.13.3
responsivefilemanager	eq	9.10.0
responsivefilemanager	eq	9.9
responsivefilemanager	eq	9.13.4
responsivefilemanager	eq	9.9.4
responsivefilemanager	eq	9.10.1
responsivefilemanager	eq	9.9.5
responsivefilemanager	eq	9.11.3
responsivefilemanager	eq	9.9.1