CVE-2018-20793

2019-02-2506:29:00

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

JSON

tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass, through the create_file action in execute.php.

CPENameOperatorVersion
responsivefilemanagereq9.12.2
responsivefilemanagereq9.13.3
responsivefilemanagereq9.10.0
responsivefilemanagereq9.9
responsivefilemanagereq9.13.4
responsivefilemanagereq9.9.4
responsivefilemanagereq9.10.1
responsivefilemanagereq9.9.5
responsivefilemanagereq9.11.3
responsivefilemanagereq9.9.1

Name	Operator	Version
responsivefilemanager	eq	9.12.2
responsivefilemanager	eq	9.13.3
responsivefilemanager	eq	9.10.0
responsivefilemanager	eq	9.9
responsivefilemanager	eq	9.13.4
responsivefilemanager	eq	9.9.4
responsivefilemanager	eq	9.10.1
responsivefilemanager	eq	9.9.5
responsivefilemanager	eq	9.11.3
responsivefilemanager	eq	9.9.1

Rows per page:

1-10 of 211

References

www.exploit-db.com/exploits/45987