PT-2020-3995

Name of the Vulnerable Software and Affected Versions: Responsive Filemanager versions through 9.14.0 Description: The issue is related to the lack of sanitization of the $ SESSION'RF'"view type" session variable in the dialog.php page. This allows for stored XSS attacks if an attacker opens ajax...

PT-2019-10234

Name of the Vulnerable Software and Affected Versions: tecrail Responsive FileManager version 9.13.4 Description: The issue allows remote attackers to read arbitrary files via path traversal using the path parameter through the "get file" action in "ajax calls.php". Recommendations: For version...

PT-2019-10237

Name of the Vulnerable Software and Affected Versions: tecrail Responsive FileManager version 9.13.4 Description: The issue allows remote attackers to read arbitrary files via path traversal using the path parameter, through the copy cut action in "ajax calls.php" and the paste clipboard action i...

PT-2019-10236

Name of the Vulnerable Software and Affected Versions: tecrail Responsive FileManager version 9.13.4 Description: The issue allows remote attackers to write to an arbitrary image file, such as jpg, jpeg, or png, via path traversal using the path parameter through the save img action in ajax...

PT-2018-13071

Name of the Vulnerable Software and Affected Versions tecrail Responsive FileManager versions prior to 9.13.4 Description The issue allows an attacker to traverse directories by manipulating the pathname constructed from external input in the /filemanager/ajax calls.php file. This is due to the...

PT-2018-13072

Name of the Vulnerable Software and Affected Versions tecrail Responsive FileManager versions prior to 9.13.4 Description The issue concerns a directory traversal problem. It arises from the improper validation of file paths in archives by the /filemanager/ajax calls.php endpoint. This allows...