Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
tecrail responsive filemanager vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2018-14728
upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.
Tecrail Responsive Filemanager 9.13.1
7.5
CVSSv3
CVE-2018-18061
An issue exists in dialog.php in tecrail Responsive FileManager 9.8.1. Attackers can access the file manager interface that provides them with the ability to upload and delete files.
Tecrail Responsive Filemanager 9.8.1
6.1
CVSSv3
CVE-2018-18062
An issue exists in dialog.php in tecrail Responsive FileManager 9.8.1. A reflected XSS vulnerability allows remote malicious users to inject arbitrary web script or HTML.
Tecrail Responsive Filemanager 9.8.1
7.5
CVSSv3
CVE-2018-20789
tecrail Responsive FileManager 9.13.4 allows remote malicious users to delete an arbitrary directory as a consequence of a paths[0] path traversal mitigation bypass through the delete_folder action in execute.php.
Tecrail Responsive Filemanager 9.13.4
7.5
CVSSv3
CVE-2018-20790
tecrail Responsive FileManager 9.13.4 allows remote malicious users to delete an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass through the delete_file action in execute.php.
Tecrail Responsive Filemanager 9.13.4
6.1
CVSSv3
CVE-2018-20791
tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mishandling of the media_preview action.
Tecrail Responsive Filemanager 9.13.4
7.5
CVSSv3
CVE-2018-20792
tecrail Responsive FileManager 9.13.4 allows remote malicious users to read arbitrary file via path traversal with the path parameter, through the get_file action in ajax_calls.php.
Tecrail Responsive Filemanager 9.13.4
7.5
CVSSv3
CVE-2018-20793
tecrail Responsive FileManager 9.13.4 allows remote malicious users to write to an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass, through the create_file action in execute.php.
Tecrail Responsive Filemanager 9.13.4
7.5
CVSSv3
CVE-2018-20794
tecrail Responsive FileManager 9.13.4 allows remote malicious users to write to an arbitrary image file (jpg/jpeg/png) via path traversal with the path parameter, through the save_img action in ajax_calls.php.
Tecrail Responsive Filemanager 9.13.4
7.5
CVSSv3
CVE-2018-20795
tecrail Responsive FileManager 9.13.4 allows remote malicious users to read arbitrary files via path traversal with the path parameter, through the copy_cut action in ajax_calls.php and the paste_clipboard action in execute.php.
Tecrail Responsive Filemanager 9.13.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2