CVE-2018-15495

/filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curlexec call, as demonstrated by a file:///etc/passwd value...

PT-2018-13057

Name of the Vulnerable Software and Affected Versions Responsive FileManager versions prior to 9.13.3 Description The issue allows Directory Traversal and SSRF due to the direct use of the url parameter in a curl exec call. This can be exploited by providing a malicious value, such as...