CVE-2018-15495

/filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curlexec call, as demonstrated by a file:///etc/passwd value...

CVE-2018-15495

CVE-2018-15495 affects Responsive FileManager prior to 9.13.3. The vulnerability allows Directory Traversal and SSRF because the url parameter is used directly in a curl_exec call, demonstrated by file:///etc/passwd. Several connected records (OSV and related entries) note that a fix existed but ...

CVE-2018-15495: Improper Limitation of a Pathname to a Restricted Directory

/filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curlexec call, as demonstrated by a file:///etc/passwd value...

PT-2018-13057

Name of the Vulnerable Software and Affected Versions Responsive FileManager versions prior to 9.13.3 Description The issue allows Directory Traversal and SSRF due to the direct use of the url parameter in a curl exec call. This can be exploited by providing a malicious value, such as...

Responsive File Manager 9.13.1 File Disclosure

Responsive Filemanager v 9.13.1 1 Author: Silton Santos ===== Table of Contents =================================== Overview Detailed description Timeline of disclosure Thanks & Acknowledgements References ===== Overview =================================== System affected : Responsive Filemanager...

Responsive FileManager Cross-Site Request Forgery Vulnerability

Responsive FileManager is an open source file manager written in PHP that supports uploading and managing videos, images and other files. A server-side request forgery vulnerability exists in the upload.php file in version 9.13.1 of Responsive FileManager. No details of the vulnerability are...

CVE-2018-14728

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter...

Server side request forgery (ssrf)

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter...

CVE-2018-14728

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter...

CVE-2018-14728: Server-Side Request Forgery (SSRF)

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter...

PT-2018-12685

Name of the Vulnerable Software and Affected Versions Responsive FileManager version 9.13.1 Description The issue allows for Server-Side Request Forgery SSRF via the url parameter in the upload.php file. Recommendations For Responsive FileManager version 9.13.1, consider restricting access to the...

Responsive Filemanager 9.13.1 - Server-Side Request Forgery

Exploit Title: Responsive filemanager 9.13.1 - Server-Side Request Forgery Date: 2018-07-29 Exploit Author: GUIA BRAHIM FOUAD Vendor Homepage: http://responsivefilemanager.com/ Software Link: https://github.com/trippo/ResponsiveFilemanager/releases/download/v9.13.1/responsivefilemanager.zip...

Responsive Filemanager 9.13.1 - Server-Side Request Forgery

Responsive Filemanager 9.13.1 - Server-Side Request Forgery Exploit Title: Responsive filemanager 9.13.1 - Server-Side Request Forgery Date: 2018-07-29 Exploit Author: GUIA BRAHIM FOUAD Vendor Homepage: http://responsivefilemanager.com/ Software Link:...

Responsive Filemanager 9.13.1 Server-Side Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: Responsive filemanager - SSRF Exploit Author: GUIA BRAHIM FOUAD Vendor Homepage: http://responsivefilemanager.com/ Software Link: https://github.com/trippo/ResponsiveFilemanager/releases/download/v9.13.1/responsivefilemanager.zi...

PT-2018-10108 · Cksource +1 · Ckeditor +1

Name of the Vulnerable Software and Affected Versions: Liferay versions 6.2.x and earlier Description: The issue concerns an FCKeditor configuration that may allow an attacker to upload or transfer files of potentially dangerous types. These files can be automatically processed within the product...

CVE-2018-10523: Exposure of Sensitive Information to an Unauthorized Actor

CMS Made Simple CMSMS through 2.2.7 contains a physical path leakage Vulnerability via /modules/DesignManager/action.ajaxgettemplates.php, /modules/DesignManager/action.ajaxgetstylesheets.php, /modules/FileManager/dunzip.php, or /modules/FileManager/untgz.php...

CVE-2015-2324

Cross-site scripting XSS vulnerability in the filemanager in the Photo Gallery plugin before 1.2.13 for WordPress allows remote authenticated users with edit permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-2324

CVE-2015-2324 is a Cross-Site Scripting (XSS) vulnerability in the WordPress Photo Gallery plugin’s filemanager, affecting versions before 1.2.13. The issue permits remote authenticated users with edit permission to inject arbitrary web script or HTML via unspecified vectors. Exploitation details...

CVE-2015-2324: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the filemanager in the Photo Gallery plugin before 1.2.13 for WordPress allows remote authenticated users with edit permission to inject arbitrary web script or HTML via unspecified vectors...

PT-2018-4366

Name of the Vulnerable Software and Affected Versions Photo Gallery plugin versions prior to 1.2.13 Description The issue is related to a cross-site scripting XSS vulnerability in the filemanager of the Photo Gallery plugin. This allows remote authenticated users with edit permission to inject...