CVE-2022-46604

The CVE-2022-46604 issue affects Tecrail Responsive FileManager v9.9.5 and earlier. A vulnerability in the file-extension check allows an attacker to upload a crafted PHP file, enabling arbitrary code execution on the server. Connected exploit sources describe remediating factors such as director...

CVE-2018-18867

CVE-2018-18867 is an SSRF vulnerability in tecrail Responsive FileManager (version 9.13.4) exploitable via the upload.php url parameter. This issue is noted to stem from an incomplete fix for CVE-2018-15495, which itself allowed Directory Traversal and SSRF because the url parameter was used dire...