Lucene search
K

708 matches found

CNVD
CNVD
added 2019/02/25 12:0 a.m.1 views

tecrail Responsive FileManager path traversal vulnerability (CNVD-2019-12903)

tecrail Responsive FileManager is an open source file manager written in PHP by the Italian company tecrail. The product supports the uploading and management of videos, images or other files. A path traversal vulnerability exists in tecrail Responsive FileManager version 9.13.4. A remote attacke...

7.5CVSS7AI score0.00938EPSS
Exploits1References1
CNVD
CNVD
added 2019/02/25 12:0 a.m.1 views

tecrail Responsive FileManager path traversal vulnerability (CNVD-2019-12898)

tecrail Responsive FileManager is an open source file manager written in PHP by the Italian company tecrail. The product supports the uploading and management of videos, images or other files. A path traversal vulnerability exists in the 'deletefile' function of the execute.php file in version...

7.5CVSS7.1AI score0.00634EPSS
Exploits1References1
CNVD
CNVD
added 2019/02/25 12:0 a.m.1 views

tecrail Responsive FileManager path traversal vulnerability (CNVD-2019-12902)

tecrail Responsive FileManager is an open source file manager written in PHP by the Italian company tecrail. The product supports the uploading and management of videos, images or other files. A path traversal vulnerability exists in the 'saveimg' function of the ajaxcalls.php file in version...

7.5CVSS7.2AI score0.0061EPSS
Exploits1References1
CNVD
CNVD
added 2019/02/25 12:0 a.m.1 views

tecrail Responsive FileManager Arbitrary Directory Deletion Vulnerability

tecrail Responsive FileManager is an open source file manager written in PHP by the Italian company tecrail. The product supports the uploading and management of videos, images or other files. A security vulnerability exists in the 'deletefolder' function of the execute.php file in version 9.13.4...

7.5CVSS7.2AI score0.00634EPSS
Exploits1References1
CNVD
CNVD
added 2019/02/25 12:0 a.m.1 views

tecrail Responsive FileManager path traversal vulnerability (CNVD-2019-12900)

tecrail Responsive FileManager is an open source file manager written in PHP by the Italian company tecrail. The product supports the uploading and management of videos, images or other files. A path traversal vulnerability exists in the 'getfile' function of the ajaxcalls.php file in version...

7.5CVSS7AI score0.00938EPSS
Exploits1References1
CNVD
CNVD
added 2019/02/25 12:0 a.m.2 views

tecrail Responsive FileManager path traversal vulnerability (CNVD-2019-12901)

tecrail Responsive FileManager is an open source file manager written in PHP by the Italian company tecrail. The product supports the uploading and management of videos, images or other files. A path traversal vulnerability exists in the 'createfile' function of the execute.php file in version...

7.5CVSS7.2AI score0.01378EPSS
Exploits1References1
CNVD
CNVD
added 2019/02/25 12:0 a.m.2 views

tecrail Responsive FileManager Cross-Site Scripting Vulnerability

tecrail Responsive FileManager is an open source file manager written in PHP by the Italian company tecrail. The product supports the uploading and management of videos, images or other files. A cross-site scripting vulnerability exists in version 9.13.4 of tecrail Responsive FileManager. A remot...

6.1CVSS6.2AI score0.00328EPSS
Exploits1References1
Exploit DB
Exploit DB
added 2018/12/14 12:0 a.m.30 views

Responsive FileManager 9.13.4 - Multiple Vulnerabilities

Responsive FileManager 9.13.4 - Multiple Vulnerabilities Date: December 12, 2018 Author: farisv Vendor Homepage: https://www.responsivefilemanager.com/ Vulnerable Package Link: https://github.com/trippo/ResponsiveFilemanager/releases/download/v9.13.4/responsivefilemanager.zip Responsive FileManag...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2018/12/12 12:0 a.m.232 views

PrestaShop 1.6.x / 1.7.x Remote Code Execution

?php / PrestaShop 1.6.x = 1.6.1.23 & 1.7.x = 1.7.4.4 - Back Office Remote Code Execution See https://github.com/farisv/PrestaShop-CVE-2018-19126 for explanation. Chaining multiple vulnerabilities to trigger deserialization via phar. Date: December 1st, 2018 Author: farisv Vendor Homepage:...

0.1AI score0.53662EPSS
Exploits6
0day.today
0day.today
added 2018/12/12 12:0 a.m.617 views

PrestaShop 1.6.x/1.7.x - Remote Code Execution Exploit

Exploit for php platform in category web applications ?php / PrestaShop 1.6.x = 1.6.1.23 & 1.7.x = 1.7.4.4 - Back Office Remote Code Execution See https://github.com/farisv/PrestaShop-CVE-2018-19126 for explanation. Chaining multiple vulnerabilities to trigger deserialization via phar. Date:...

0.2AI score0.53662EPSS
Exploits6
OSV
OSV
added 2018/10/31 5:29 a.m.10 views

CVE-2018-18867

An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495...

8.6CVSS7AI score
Exploits0References1
Prion
Prion
added 2018/10/31 5:29 a.m.12 views

Server side request forgery (ssrf)

An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495...

5CVSS7.8AI score0.00392EPSS
Exploits2References1Affected Software1
NVD
NVD
added 2018/10/31 5:29 a.m.12 views

CVE-2018-18867

An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495...

8.6CVSS7.8AI score0.00352EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/10/31 5:0 a.m.13 views

CVE-2018-18867

An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495...

7.9AI score0.00352EPSS
Exploits1References1
CVE
CVE
added 2018/10/31 5:0 a.m.36 views

CVE-2018-18867

CVE-2018-18867 is an SSRF vulnerability in tecrail Responsive FileManager (version 9.13.4) exploitable via the upload.php url parameter. This issue is noted to stem from an incomplete fix for CVE-2018-15495, which itself allowed Directory Traversal and SSRF because the url parameter was used dire...

8.6CVSS7.7AI score0.00352EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2018/10/15 7:29 a.m.11 views

Design/Logic Flaw

CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fmcurrentdir parameter, or the admin/index.php module, servicestart, servicefullstatus, servicerestart, servicestop, or file within the fileeditor parameter...

4.3CVSS6AI score0.03786EPSS
Exploits2References3Affected Software1
OSV
OSV
added 2018/10/10 9:29 p.m.1 views

CVE-2018-18062

An issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. A reflected XSS vulnerability allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS5.9AI score0.00223EPSS
Exploits3References1
NVD
NVD
added 2018/10/10 9:29 p.m.9 views

CVE-2018-18061

An issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. Attackers can access the file manager interface that provides them with the ability to upload and delete files...

7.5CVSS7.5AI score0.00204EPSS
Exploits3References1
OSV
OSV
added 2018/10/10 9:29 p.m.2 views

CVE-2018-18061

An issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. Attackers can access the file manager interface that provides them with the ability to upload and delete files...

7.5CVSS5.8AI score0.00204EPSS
Exploits3References1
NVD
NVD
added 2018/10/10 9:29 p.m.8 views

CVE-2018-18062

An issue was discovered in dialog.php in tecrail Responsive FileManager 9.8.1. A reflected XSS vulnerability allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS6AI score0.00223EPSS
Exploits3References1
Rows per page
Query Builder