CVE-2023-35840

CVE-2023-35840 elFinder 2.1.62 - Vulnérabilité de traversée de chemin dans le connecteur PHP LocalVolumeDriver Description Vulnérabilité de traversée de chemin dans le connecteur PHP LocalVolumeDriver. Cette vulnérabilité peut être exploitée en permettant à des utilisateurs non fiables d'écrire s...

elFinder < 2.1.58 - Remote Code Execution

studio-42/elfinder before 2.1.58 contains a remote code execution caused by execution of PHP code in a .phar file, letting attackers execute arbitrary PHP code if the server parses .phar files as PHP, exploit requires server to parse .phar files as PHP. id: CVE-2021-23394 info: name: elFinder...

Maian Cart <=3.8 - Remote Code Execution

Maian Cart 3.0 to 3.8 via the elFinder file manager plugin contains a remote code execution vulnerability. id: CVE-2021-32172 info: name: Maian Cart =3.8 to mitigate this vulnerability. reference: - https://dreyand.github.io/maian-cart-rce/ - https://github.com/DreyAnd/maian-cart-rce -...

Xerte Online Toolkits <= 3.15 - Remote Code Execution

Xerte Online Toolkits versions 3.15 and earlier expose the elFinder file manager connector at /editor/elfinder/php/connector.php without authentication CVE-2026-34413, because the access-control redirect for unauthenticated users does not call exit/die and execution continues server-side. This is...

elFinder <=2.1.60 - Local File Inclusion

elFinder through 2.1.60 is affected by local file inclusion via connector.minimal.php. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths. id: CVE-2022-26960 info: name: elFind...

elFinder 2.1.58 - Remote Code Execution

elFinder 2.1.58 is impacted by multiple remote code execution vulnerabilities that could allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration. id: CVE-2021-32682 info: name: elFinder 2.1.58 - Remote Code Executi...

wp-file-manager-0day

CVE-2020-25213 wp-file-manager 6.7 20 авг 2020 Wordpress Plugin 0day elFinder уязвимость — это хорошо известная уязвимость, мой скрипт только меняет путь на "/wp-content/plugins/wp-file-manager/". Прекратите просить исправления в скрипте или что-то ещё для меня. RTFM... References:...

CVE-2019-9194-elFinder-Command-Injection-PoC

CVE-2019-9194 — elFinder Injection de commande PoC Vulnérabilité d'injection de commande dans elFinder = 2.1.47 via le composant connecteur PHP. Permet l'exécution de code à distance non authentifiée en tant qu'utilisateur du serveur web. Fonctionnement Télécharge un JPEG valide avec un nom de...

Studio-42 elFinder <2.1.60 - Arbitrary File Upload

Studio-42 elFinder 2.0.4 to 2.1.59 is vulnerable to unauthenticated file upload via connector.minimal.php which could allow a remote user to upload arbitrary files and execute PHP code. id: CVE-2021-43421 info: name: Studio-42 elFinder 2.1.60 - Arbitrary File Upload author: akincibor severity:...

Python-CVE-2020-25213

Python-CVE-2020-25213 Python Интерактивный эксплойт для уязвимости WP File Manager. Плагин File Manager wp-file-manager версий до 6.9 для WordPress позволяет удаленным злоумышленникам загружать и выполнять произвольный PHP-код, поскольку он переименовывает небезопасный файл примера соединителя...

CVE-2021-23394

Настройка воспроизведения elFinder CVE-2021-23394 Этот репозиторий содержит настройку для воспроизведения CVE-2021-23394 произвольное выполнение файлов в elFinder с использованием Docker. Он настраивает четыре среды для сравнения уязвимых и исправленных версий на Apache и Nginx. Обзор В состав...

xerteonlinetoolkits-rce

Xerte Online Toolkits = 3.15 Exécution de code à distance Les versions 3.15 et antérieures de Xerte Online Toolkits présentent 3 vulnérabilités dans le composant /editor/elfinder/php/connector.php, qui peuvent être enchaînées par un attaquant non authentifié pour parvenir à une exécution de code ...

Python-exploit-CVE-2020-25213

Description Le plugin File Manager wp-file-manager avant la version 6.9 pour WordPress permet à des attaquants distants de télécharger et d'exécuter du code PHP arbitraire car il renomme un fichier de connecteur elFinder d'exemple non sécurisé avec l'extension .php. Cela permet par exemple aux...

elFinder <= 2.1.47 - Command Injection

elFinder before 2.1.48 has a command injection vulnerability in the PHP connector. The vulnerability occurs when performing image operations on JPEG files, where the filename is passed to the exiftran utility without proper sanitization, allowing command injection. id: CVE-2019-9194 info: name:...

CVE-2026-81890

creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:38+00:00| published-proof-of-concept| https://github.com/Studio-42/elFinder/security/advisories/GHSA-9hjf-w35w-6vx2...

CVE-2026-81891

creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:35+00:00| published-proof-of-concept| https://github.com/Studio-42/elFinder/security/advisories/GHSA-gxmj-r5rf-ggwq 2026-09-04 00:05:19+00:00| seen| https://bsky.app/profile/opsmatters.com/post/3muno52zkqz23 2026-09-08 03:44:17+00:00|...

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

Summary elFinder provides uploadDeny and uploadAllow options in its connector configuration to restrict which MIME types may be uploaded. When uploadDeny includes text/x-php, direct upload of .php, .phtml, and .phar files is correctly blocked. However, the extract command ZIP decompression...

EUVD-2026-68800

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload RCE...

GHSA-GXMJ-R5RF-GGWQ elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

Summary elFinder provides uploadDeny and uploadAllow options in its connector configuration to restrict which MIME types may be uploaded. When uploadDeny includes text/x-php, direct upload of .php, .phtml, and .phar files is correctly blocked. However, the extract command ZIP decompression...

Arbitrary File Upload

Overview Affected versions of this package are vulnerable to Arbitrary File Upload through the extract process. An attacker can execute arbitrary PHP code on the server by uploading a ZIP archive containing PHP-executable files and extracting them into a web-accessible directory. This is only...