EUVD-2026-52798

A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.php. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public a...

PT-2026-67787

Name of the Vulnerable Software and Affected Versions Trippo ResponsiveFilemanager versions prior to 9.14.1 Description A remote flaw exists in an unknown function within the filemanager/dialog.php file. This issue allows for unrestricted upload of files to the server. Recommendations At the...

CVE-2026-18788: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.php. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public a...

CVE-2026-5482 Remote Code Execution via Unrestricted File Upload in Responsive FileManager

Responsive FileManager's allows an unauthenticated attacker to upload files of any type and extension without restriction using dialog.php endpoint, leading to Remote Code Execution. This project is unmaintained at the time of CVE assignment. The vulnerability was found in the latest release 9.14...

CVE-2026-5482: Unrestricted Upload of File with Dangerous Type

Responsive FileManager's allows an unauthenticated attacker to upload files of any type and extension without restriction using dialog.php endpoint, leading to Remote Code Execution. This project is unmaintained at the time of CVE assignment. The vulnerability was found in the latest release 9.14...

EUVD-2020-3464

Malware in sbrugna...

EUVD-2017-16632

Malware in sbrugna...

EUVD-2007-5787

Malware in sbrugna...

CVE-2020-11106

An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the session variable $SESSION'RF'"viewtype" wasn't sanitized if it was already set. This made stored XSS possible if one opens ajaxcalls.php and uses the "view" action and places a payload in the type...

CVE-2024-26557

Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter...

CVE-2024-26557: Improper Neutralization of Input During Web Page Generation

Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter...

CVE-2024-26557

Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter...

CVE-2024-26557

Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter...

CVE-2024-26557

Codiad v2.8.4 is vulnerable to a reflected Cross-Site Scripting (XSS) flaw in the type parameter of the components/market/dialog.php endpoint. This vulnerability allows for the execution of malicious scripts, which could lead to remote execution . To mitigate this risk, users should sanitize inpu...

CVE-2024-26557

Codiad v2.8.4 allows reflected XSS via the components/market/dialog.php type parameter...

Cross site scripting

Cross Site Scripting vulnerability found in Trippo ResponsiveFilemanager v.9.14.0 and before allows a remote attacker to execute arbitrary code via the sortby parameter in the dialog.php file...

PT-2023-12159

Name of the Vulnerable Software and Affected Versions Trippo ResponsiveFilemanager versions 9.14.0 and earlier Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the sort by parameter in the "dialog.php" file. This enables the attacker to inject...

CVE-2021-31711

Cross Site Scripting vulnerability found in Trippo ResponsiveFilemanager v.9.14.0 and before allows a remote attacker to execute arbitrary code via the sortby parameter in the dialog.php file...

CVE-2021-31711: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Trippo ResponsiveFilemanager v.9.14.0 and before allows a remote attacker to execute arbitrary code via the sortby parameter in the dialog.php file...

ResponsiveFilemanager Cross-Site Script Vulnerability

ResponsiveFilemanager is a fully responsive file manager. A security vulnerability exists in ResponsiveFilemanager v.9.14.0 and earlier versions, which stems from a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code via the sortby parameter in the dialog.php...