Lucene search
PRIOn knowledge basePRION:CVE-2020-10212HistoryMar 07, 2020 - 12:15 a.m.
Design/Logic Flaw
2020-03-0700:15:00
PRIOn knowledge base
www.prio-n.com
7
upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an internal IP address. For example, an SSRF attempt may succeed if a .ico filename is added to the PATH_INFO. Also, an attacker could create a DNS hostname that resolves to the 0.0.0.0 IP address for DNS pinning. NOTE: this issue exists because of an incomplete fix for CVE-2018-14728.
| CPE | Name | Operator | Version |
|---|---|---|---|
| responsive_filemanager | eq | 9.13.4 | |
| responsive_filemanager | eq | 9.14.0 |
Related
cve
cve
CVE-2020-10212
2020-03-07 00:15:13
CVE-2018-14728
2018-08-03 18:29:00
osv
osv
CVE-2020-10212
2020-03-07 00:15:13
CVE-2018-14728
2018-08-03 18:29:00
nvd
nvd
CVE-2020-10212
2020-03-07 00:15:13
CVE-2018-14728
2018-08-03 18:29:00
cvelist
cvelist
CVE-2020-10212
2020-03-06 23:30:11
CVE-2018-14728
2018-08-03 18:00:00
zdt
zdt
Responsive Filemanager 9.13.1 Server-Side Request Forgery Vulnerability
2018-07-30 00:00:00
exploitpack
exploitpack
Responsive Filemanager 9.13.1 - Server-Side Request Forgery
2018-07-30 00:00:00
prion
prion
Server side request forgery (ssrf)
2018-08-03 18:29:00
nuclei
nuclei
Responsive filemanager 9.13.1 Server-Side Request Forgery
2020-04-08 12:34:50
packetstorm
packetstorm
Responsive Filemanager 9.13.1 Server-Side Request Forgery
2018-07-29 00:00:00
exploitdb
exploitdb
Responsive Filemanager 9.13.1 - Server-Side Request Forgery
2018-07-30 00:00:00