CVE-2019-9194

The CVE-2019-9194 issue affects elFinder before 2.1.48 (PHP connector). The Nuclei/YAML entry and Exploit-DB records confirm a command injection in the PHP connector triggered during JPEG image operations, where the filename is passed to exiftran without proper sanitization, enabling remote comma...

CVE-2021-32682

elFinder 2.1.58 is affected by multiple remote code execution vulnerabilities that could allow an attacker to execute arbitrary code and commands on the server hosting the PHP connector, even with minimal configuration. The issues were patched in 2.1.59; a mitigation is to ensure the connector is...

CVE-2021-43421

Summary: CVE-2021-43421 affects Studio-42 elFinder versions 2.0.4 through 2.1.59, where an unauthenticated file upload via connector.minimal.php enables arbitrary file uploads and PHP code execution on the server. Details from connected docs: multiple sources describe unauthenticated arbitrary fi...

CVE-2022-26960

CVE-2022-26960 affects elFinder

CVE-2021-23394

The CVE-2021-23394 issue affects studio-42/elFinder prior to 2.1.58, where remote code execution is possible via PHP code execution in a .phar file if the server parses .phar as PHP. Root cause: unsafe handling of .phar uploads allowing arbitrary PHP execution. Impact: attacker can execute PHP on...

CVE-2023-52044

Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution due to unrestricted upload of .php8 files. This affects elFinder’s file upload handling and can allow arbitrary code execution on the server. The Veracode/Snyk records corroborate RCE and cite upgrading to 2.1.63+ as the remediation...

CVE-2022-27115

Studio-42 elFinder 2.1.60 is vulnerable to remote code execution via a filename-based bypass during file uploads. Root cause: filename bypass allows crafted uploads to execute on the server. Affected: elFinder 2.1.60 (Windows-specific advisory notes). Impact: remote code execution with high/criti...

CVE-2021-45919

Studio 42 elFinder versions up to 2.1.31 are affected by a cross-site scripting (XSS) vulnerability involving SVG data handling. The vulnerability stems from insecure handling of SVG document data, enabling client-side code execution. Affected product is elFinder (Studio 42), with the issue docum...

CVE-2019-5884

The CVE-2019-5884 entry concerns information disclosure in the elFinder project. It affects elFinder versions up to and including 2.1.44 (before 2.1.45), where PHP’s curl extension, combined with unsafe PHP configurations (safe_mode or open_basedir not set), can leak information. Root cause is ti...

CVE-2024-38909

Studio 42 elFinder 2.1.64 is affected by an Incorrect Access Control vulnerability that lets an attacker copy files with unauthorized extensions between server directories, potentially exposing secrets and enabling remote code execution. Root cause: flawed access control allowing cross-directory ...

CVE-2023-35840

CVE-2023-35840 affects elFinder before 2.1.62 due to a path traversal weakness in the PHP LocalVolumeDriver connector (joinPath in elFinderVolumeLocalFileSystem.class.php). The root cause is incomplete validation of the target parameter, allowing traversal beyond web root. OpenVAS details indicat...

CVE-2023-52045

CVE-2023-52045 affects Studio-42 elFinder 2.1.62, where a filename restriction bypass leads to a persistent XSS vulnerability. Impact: stored XSS via crafted filenames; context is in elFinder file handling. Remediation: upgrade to elFinder 2.1.63 or higher (as reported by Snyk/Veracode/Red Hat re...

CVE-2019-6257

The CVE-2019-6257 issue affects elFinder prior to version 2.1.46, caused by a vulnerability in get_remote_contents() within php/elFinder.class.php that permits server-side request forgery (SSRF) to access internal network resources. Public documents from NVD, Red Hat, OSV, and security advisories...

CVE-2018-9110

Studio 42 elFinder is vulnerable before version 2.1.37 due to a directory traversal flaw in elFinder.class.php zipdl() that lets an attacker download files accessible to the web server and delete files owned by the server process. The issue stems from an incomplete fix for CVE-2018-9109. Public r...

CVE-2018-9109

Studio 42 elFinder (PHP Web file manager) prior to version 2.1.36 is affected by a directory traversal vulnerability in elFinder.class.php, zipdl() function. The flaw allows a remote attacker to download files accessible by the web server process and to delete files owned by the account running t...

CVE-2026-41247

Vulnerability overview: elFinder