Exploit for Unrestricted Upload of File with Dangerous Type in Tecrail Responsive_Filemanager

CVE 2022 46604 – Responsive File Manager ⚠️ Disclaimer...

CVE-2022-46604

An issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechanism and upload a crafted PHP file, leading to arbitrary code execution...

Responsive FileManager 9.9.5 - Remote Code Execution (RCE)

Exploit Title: Responsive FileManager 9.9.5 - Remote Code Execution RCE Date: 02-Feb-2023 Exploit Author: Galoget Latorre @galoget Vendor Homepage: https://responsivefilemanager.com Software Link: https://github.com/trippo/ResponsiveFilemanager/releases/download/v9.9.5/responsivefilemanager.zip...

Responsive FileManager 9.9.5 - Remote Code Execution Exploit

Exploit Title: Responsive FileManager 9.9.5 - Remote Code Execution RCE Exploit Author: Galoget Latorre @galoget Vendor Homepage: https://responsivefilemanager.com Software Link: https://github.com/trippo/ResponsiveFilemanager/releases/download/v9.9.5/responsivefilemanager.zip Dockerfile:...

Exploit for Unrestricted Upload of File with Dangerous Type in Tecrail Responsive_Filemanager

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v...

CVE-2022-46604

creationtimestamp| type| source ---|---|--- 2023-02-02 16:14:49+00:00| seen| https://t.me/cibsecurity/57393 2023-04-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51251 2023-04-10 10:59:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8091 2023-04-29...

CVE-2022-46604

Tecrail Responsive FileManager versions v9.9.5 and below are vulnerable to a flaw allowing attackers to bypass the file extension check mechanism . By uploading a crafted PHP file, an attacker can achieve arbitrary code execution on the host server. Additionally, some documentation indicates that...