tecrail responsive filemanager vulnerabilities and exploits

(subscribe to this query)

upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an internal IP address. For example, an SSRF attempt may succeed if a .ico filename i...

Tecrail Responsive Filemanager 9.13.4 Tecrail Responsive Filemanager 9.14.0

A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.11.0 is able to ...

Tecrail Responsive Filemanager

In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.

Tecrail Responsive Filemanager

1 Github repository

/filemanager/ajax_calls.php in tecrail Responsive FileManager prior to 9.13.4 does not properly validate file paths in archives, allowing for the extraction of crafted archives to overwrite arbitrary files via an extract action, aka Directory Traversal.

Tecrail Responsive Filemanager

1 EDB exploit

An issue exists in Responsive Filemanager up to and including 9.14.0. In the dialog.php page, the session variable $_SESSION['RF']["view_type"] wasn't sanitized if it was already set. This made stored XSS possible if one opens ajax_calls.php and uses the ...

Tecrail Responsive Filemanager

An issue in Tecrail Responsive FileManager v9.9.5 and below allows malicious users to bypass the file extension check mechanism and upload a crafted PHP file, leading to arbitrary code execution.

Tecrail Responsive Filemanager

2 Github repositories

/filemanager/ajax_calls.php in tecrail Responsive FileManager prior to 9.13.4 uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize get_file sequences such as ".." that can resolve to a location tha...

Tecrail Responsive Filemanager

1 EDB exploit

/filemanager/upload.php in Responsive FileManager prior to 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curl_exec call, as demonstrated by a file:///etc/passwd value.

Tecrail Responsive Filemanager

An issue exists in Responsive Filemanager up to and including 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. This makes it possible to execute PHP code if a legitimate JPEG image contains ...

Tecrail Responsive Filemanager

An SSRF issue exists in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495.

Tecrail Responsive Filemanager 9.13.4

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook