PT-2020-19857

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS versions through 7.42 Description The issue allows for remote PHP code execution due to an Unrestricted Upload Of A File With A Dangerous Type in the File Manager. An attacker, with Administrator access, can create or use an...

PT-2020-1934

Name of the Vulnerable Software and Affected Versions Adobe Bridge version 10.0 Description The issue is related to an out-of-bounds write vulnerability in the file manager. Successful exploitation could lead to arbitrary code execution, allowing a remote attacker to execute code on the target...

PT-2020-12200

Name of the Vulnerable Software and Affected Versions AContent versions 1.4 and earlier Description The issue allows a user to run commands on the server with a low-privileged account. It is caused by an arbitrary file upload vulnerability in the upload section of the file manager page via...

CVE-2020-10557

An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions. Recen...

UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read

UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Exploit Title: UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Google Dork: inurl:"laravel-filemanager?type=Files" -site:github.com -site:github.io Date: 2020-02-04 Exploit Author: NgoAnhDuc Vendor Homepage:...

UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Vulnerability

Exploit for php platform in category web applications Exploit Title: UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Google Dork: inurl:"laravel-filemanager?type=Files" -site:github.com -site:github.io Exploit Author: NgoAnhDuc Vendor Homepage:...

UniSharp Laravel File Manager 2.0.0 Arbitrary File Read

Exploit Title: UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Google Dork: inurl:"laravel-filemanager?type=Files" -site:github.com -site:github.io Date: 2020-02-04 Exploit Author: NgoAnhDuc Vendor Homepage: https://github.com/UniSharp/laravel-filemanager Software Link:...

UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read

Exploit Title: UniSharp Laravel File Manager 2.0.0 - Arbitrary File Read Google Dork: inurl:"laravel-filemanager?type=Files" -site:github.com -site:github.io Date: 2020-02-04 Exploit Author: NgoAnhDuc Vendor Homepage: https://github.com/UniSharp/laravel-filemanager Software Link:...

Rumpus FTP Server Web File Manager Cross-Site Request Forgery Vulnerability (CNVD-2020-10630)

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the Network Settings feature of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that a request is coming fro...

Rumpus FTP Server Web File Manager Cross-Site Request Forgery Vulnerability

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the Edit Account feature of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that requests are coming from a...

Rumpus FTP Web File Manager Cross-Site Request Forgery Vulnerability (CNVD-2020-04663)

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the FTP Settings feature of Web File Manager in Rumpus FTP version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that a request is coming from a trusted...

Rumpus FTP Web File Manager Cross-Site Request Forgery Vulnerability (CNVD-2020-04662)

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the folder settings feature of Web File Manager in Rumpus FTP version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that requests are coming from a...

Rumpus FTP Web File Manager Cross-Site Request Forgery Vulnerability (CNVD-2020-04693)

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the Web Settings feature of Web File Manager in Rumpus FTP version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that requests are coming from a trusted...

Rumpus FTP Web File Manager Cross-Site Request Forgery Vulnerability (CNVD-2020-04695)

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the Event Notification Settings feature of Web File Manager in Rumpus FTP version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that requests are coming...

Rumpus FTP Server Web File Manager Web Settings Component Cross-Site Scripting Vulnerability

Rumpus FTP Server is an Internet file transfer solution for the Mac platform. A cross-site scripting vulnerability exists in the Web Settings component of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from a lack of proper validation of client data by the WEB...

Rumpus FTP Server Web File Manager Cross-Site Request Forgery Vulnerability

Rumpus FTP Server is an Internet file transfer solution for the Mac platform. A cross-site request forgery vulnerability exists in the Create/Delete Account feature of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying...

Rumpus FTP Web File Manager Block Clients Component Cross-Site Request Forgery Vulnerability

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP version 8.2.9.1. The vulnerability stems from a web application that does not adequately validate that a request is coming from...

Rumpus FTP Web File Manager Upload Center Forms Component Cross-Site Request Forgery Vulnerability

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the Upload Center Forms component of Web File Manager in Rumpus FTP version 8.2.9.1. The vulnerability stems from the web application not adequately verifying that requests are coming from ...

Rumpus FTP Web File Manager File Types Component Cross-Site Request Forgery Vulnerability

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the File Types component of Web File Manager in Rumpus FTP version 8.2.9.1. The vulnerability stems from a web application that does not adequately validate that a request is coming from a...

Rumpus FTP Server Web File Manager Cross-Site Scripting Vulnerability

Rumpus FTP Server is an Internet file transfer solution for the Mac platform. A cross-site scripting vulnerability exists in Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from a lack of proper validation of client data by the web application. An attacker can explo...