CVE-2025-63307

CVE-2025-63307 – Cross-site Scripting XSS stocké et authentifié dans laravel-file-manager v3.3.1 🧭 Vue d’ensemble Une vulnérabilité de Cross-site Scripting XSS stocké et authentifié dans laravel-file-manager v3.3.1 et versions antérieures permet à des attaquants ayant accès à l’interface du...

CVE-2025-65346

CVE-2025-65346 – ثغرة اجتياز المسار المُوثّقة من دالة UnZip تؤدي إلى كتابة ملفات تعسفية في laravel-file-manager الإصدار 3.3.1 🧭 نظرة عامة ثغرة اجتياز المسار في وظيفة فك الضغط/استخراج الملفات داخل التطبيق المصاب تسمح للمهاجم بكتابة ملفات في مواقع نظام ملفات تعسفية أثناء استخراج الأرشيف. نظرًا لأن...

CVE-2025-56399

CVE-2025-56399 Массовый эксплойт CVE-2025-56399 – Удаленное выполнение кода в laravel-file-manager v3.3.1. Эксплуатирует неправильно настроенную конфигурацию в Laravel File Manager для загрузки и проверки PHP-шелла через неаутентифицированную загрузку файлов. Установка Скачайте репозиторий...

CVE-2025-65345

CVE-2025-65345 – تجاوز المسار المُصادق عليه من وظيفة الضغط يؤدي إلى كشف نظام الملفات في laravel-file-manager v3.3.1 🧭 نظرة عامة ثغرة تجاوز الدليل المُصادق عليه في laravel-file-manager v3.3.1 والإصدارات الأقدم تسمح للمهاجمين الذين لديهم وصول إلى واجهة مدير الملفات باستخدام وظيفة الضغط/الأرشفة لإنش...

laravel-filemanager-unrestricted-upload

رفع ملف غير مقيد في Laravel FileManager CVE-2025-56399 CWE-434: رفع غير مقيد لملف بنوع خطير درجة CVSS: 8.5 عالية 📋 الوصف توفر هذه الأداة إثبات المفهوم PoC لـ CVE-2025-56399 ، وهي ثغرة أمنية خطيرة في alexusmai/laravel-file-manager الإصدارات ≤ 3.3.1. تسمح الثغرة لـمهاجم مصادق بتحقيق تنفيذ تعليمات...

EUVD-2019-20081

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673 UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 expose an arbitrary file upload vulnerability at the upload endpoint. An authenticated attacker can submit multipart form data to upload PHP files via the type parameter set to Files, then access the uploaded file in the working directory path ...

CVE-2019-25673

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

CVE-2019-25673 UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File Upload

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

PT-2026-30482

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute...

Laravel File Manager 代码问题漏洞

Laravel File Manager is a file manager developed by Aleksandr Manekin. The Laravel File Manager v2.0.0-alpha7 and v2.0 versions have code vulnerabilities. These vulnerabilities stem from the possibility of arbitrary file uploads, which could allow authenticated attackers to upload malicious files...

Directory Traversal

alexusmai laravel-file-manager is vulnerable to Directory Traversal. The vulnerability is due to improper path validation in the zip/archiving functionality, which allows an attacker to create crafted archives that include files and directories outside the intended scope...

Directory Traversal

alexusmai/laravel-file-manager is vulnerable to Directory Traversal. The vulnerability is due to insufficient validation of extraction paths during archive unzip functionality, which allows an attacker to write files to arbitrary locations on the filesystem...

CVE-2025-65346

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...

alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...

GHSA-Q5HG-WPPQ-R2CC alexusmai laravel-file-manager is vulnerable to Directory Traversal via the unzip/extraction functionality

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...

CVE-2025-65346

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths...

CVE-2025-65345

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation...