CVE-2018-16966

CVE-2018-16966 concerns the WordPress plugin “mndpsingh287 File Manager” (v3.0) where a CSRF vulnerability exists via the page=wp_file_manager_root public_path parameter. The issue allows an attacker to trigger actions on behalf of a logged-in user (requires user interaction per CVSS3) without au...

CVE-2018-16966

There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wpfilemanagerroot publicpath parameter...

CVE-2018-16967: Improper Neutralization of Input During Web Page Generation

There is an XSS vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wpfilemanagerroot publicpath parameter...

CVE-2018-16966: Cross-Site Request Forgery (CSRF)

There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wpfilemanagerroot publicpath parameter...

PT-2019-5908

Name of the Vulnerable Software and Affected Versions Adobe Bridge CC version 9.0.2 Description The issue is related to a use-after-free vulnerability in the file manager of Adobe Bridge CC. Successful exploitation could lead to information disclosure, allowing a remote attacker to reveal protect...

PT-2019-9386 · WordPress · Mndpsingh287 File Manager

Name of the Vulnerable Software and Affected Versions: mndpsingh287 File Manager plugin version 3.0 for WordPress Description: The issue is related to a CSRF vulnerability. It affects the public path parameter in the page=wp file manager root endpoint. Recommendations: For version 3.0 of the...

PT-2019-9387 · WordPress · Mndpsingh287 File Manager

Name of the Vulnerable Software and Affected Versions: mndpsingh287 File Manager plugin version 3.0 Description: The issue is related to an XSS vulnerability. It affects the mndpsingh287 File Manager plugin for WordPress, specifically via the public path parameter in the page=wp file manager root...

ATutor 2.2.4 - file_manager Remote Code Execution Exploit #RCE

Exploit for php platform in category web applications This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ATutor %q This module allows the user to run commands on the server with teacher user...

ATutor file_manager Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ATutor %q This module allows the user to run commands on the server with teacher user privilege. The 'Upload files' section in the 'File Manager'...

PT-2019-6009

Name of the Vulnerable Software and Affected Versions Adobe Bridge CC version 9.0.2 Description The issue is related to a memory corruption vulnerability, specifically a buffer overflow, in the file manager. This could allow a remote attacker to gain unauthorized access to protected information...

PT-2019-6008

Name of the Vulnerable Software and Affected Versions Adobe Bridge CC version 9.0.2 Description The issue is related to an out-of-bounds read in the file manager of Adobe Bridge, which could lead to information disclosure if successfully exploited. This could allow a remote attacker to gain...

PT-2019-6013

Name of the Vulnerable Software and Affected Versions Adobe Bridge CC version 9.0.2 Description The issue is related to an out-of-bounds read in the file manager of Adobe Bridge, which could allow a remote attacker to gain unauthorized access to protected information. Successful exploitation may...

PT-2019-6012

Name of the Vulnerable Software and Affected Versions Adobe Bridge CC version 9.0.2 Description The issue is related to an out-of-bounds write vulnerability in the file manager. This could allow a remote attacker to execute arbitrary code. Recommendations For Adobe Bridge CC version 9.0.2, update...

PT-2019-6014

Name of the Vulnerable Software and Affected Versions Adobe Bridge CC version 9.0.2 Description The issue is related to an out-of-bounds read in the file manager of Adobe Bridge CC, which could lead to information disclosure if successfully exploited. This vulnerability may allow a remote attacke...

PT-2019-5456

Name of the Vulnerable Software and Affected Versions Adobe Bridge CC versions 9.0.2 Description The issue is related to a heap overflow vulnerability in the file manager. Exploitation of this issue could allow a remote attacker to execute arbitrary code in the context of the current user...

Pydio Cross-Site Scripting Vulnerability (CNVD-2019-14091)

Pydio AjaXplorer is a web-based remote file manager. The manager supports uploading and downloading files, online file editing, image previewing and more. A cross-site scripting vulnerability exists in Pydio version 8, which stems from a lack of proper validation of client-side data by the WEB...

Path traversal

An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx component from a potentially untrusted location on the local filesystem. This is especially dangerous if a...

CVE-2019-6714: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticated users to load a PostView.ascx component from a potentially untrusted location on the local filesystem. This is especially dangerous if a...

CVE-2019-9624

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI...

Design/Logic Flaw

Webmin 1.900 allows remote attackers to execute arbitrary code by leveraging the "Java file manager" and "Upload and Download" privileges to upload a crafted .cgi file via the /updown/upload.cgi URI...