File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode

The plugin does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the worst case, this is available to unauthenticated users. PoC 1. Add the following shortcode to ...

File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode

The plugin does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the worst case, this is available to unauthenticated users. 1. Add the following shortcode to a...

Wordpress File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution through shortcode

The Wordpress plugin does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the worst case, this is available to unauthenticated users, but is also works in an...

Design/Logic Flaw

eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions...

CVE-2023-29657

CVE-2023-29657 affects eXtplorer 2.1.15. The vulnerability arises from insecure permissions in the file manager’s upload feature, allowing a ZIP containing PHP pages to be uploaded and executed, leading to arbitrary code execution. Impact is described as high (C: High, I: High, A: High) with netw...

CVE-2023-29657: Unrestricted Upload of File with Dangerous Type

eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions...

PT-2023-22353 · Extplorer · Extplorer

Name of the Vulnerable Software and Affected Versions: eXtplorer version 2.1.15 Description: The issue allows for insecure permissions, specifically through the file upload feature in the file manager. This vulnerability enables the upload of zip files that contain PHP pages, which can lead to...

CVE-2023-29657

eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions...

Kodbox security vulnerabilities

kodbox is a network file manager. A security vulnerability exists in kodbox versions 1.2.x through 1.3.7, which stems from the presence of sensitive information disclosure issues...

CVE-2023-29657

eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions...

Kodbox cross-site scripting vulnerabilities

kodbox is a web file manager. A security vulnerability exists in kodbox 1.37 and earlier versions, which is rooted in a vulnerability to cross-site scripting XSS attacks via debugging messages...

Directory Traversal

contao/contao and contao/core-bundle are vulnerable to Directory Traversal. The vulnerability exists in DCFolder.php which allows an attacker to list files outside the document root in the file manager...

PHPFusion 9.10.30 Cross Site Scripting

Exploit Title: PHPFusion 9.10.30 - Stored Cross-Site Scripting XSS Application: PHPFusion Version: 9.10.30 Bugs: XSS Technology: PHP Vendor URL: https://www.php-fusion.co.uk/home.php Software Link: https://sourceforge.net/projects/php-fusion/ Date of found: 28-04-2023 Author: Mirabbas Ağalarov...

PHPFusion 9.10.30 - Stored Cross-Site Scripting Vulnerability

Exploit Title: PHPFusion 9.10.30 - Stored Cross-Site Scripting XSS Application: PHPFusion Version: 9.10.30 Bugs: XSS Technology: PHP Vendor URL: https://www.php-fusion.co.uk/home.php Software Link: https://sourceforge.net/projects/php-fusion/ Date of found: 28-04-2023 Author: Mirabbas Ağalarov...

PHPFusion 9.10.30 - Stored Cross-Site Scripting (XSS)

Exploit Title: PHPFusion 9.10.30 - Stored Cross-Site Scripting XSS Application: PHPFusion Version: 9.10.30 Bugs: XSS Technology: PHP Vendor URL: https://www.php-fusion.co.uk/home.php Software Link: https://sourceforge.net/projects/php-fusion/ Date of found: 28-04-2023 Author: Mirabbas Ağalarov...

WordPress Bit File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection

Software Bit File Manager Type Plugin Vulnerable versions = 5.2.7 Fixed in 6.0.0 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2022-47599 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID 73c858fcfca7 Credits rezaduty Required privilege Administrator...

Path traversal vulnerability in the file manager

Impact Authenticated users in the back end can list files outside the document root in the file manager. Patches Update to Contao 4.9.40, 4.13.21 or 5.1.4. Workarounds None. References https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager For more information If you ha...

GHSA-FP7Q-XHHW-6RJ3 Path traversal vulnerability in the file manager

Impact Authenticated users in the back end can list files outside the document root in the file manager. Patches Update to Contao 4.9.40, 4.13.21 or 5.1.4. Workarounds None. References https://contao.org/en/security-advisories/directory-traversal-in-the-file-manager For more information If you ha...

CVE-2023-29200

Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system files in the file manager by manipulating the Ajax request. However, it is not possible to read the contents of these files. Users should update to Contao...

Design/Logic Flaw

Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system files in the file manager by manipulating the Ajax request. However, it is not possible to read the contents of these files. Users should update to Contao...