Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
tecrail responsive filemanager vulnerabilities and exploits
(subscribe to this query)
668
VMScore
CVE-2018-14728
upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.
Tecrail Responsive Filemanager 9.13.1
570
VMScore
CVE-2018-18061
An issue exists in dialog.php in tecrail Responsive FileManager 9.8.1. Attackers can access the file manager interface that provides them with the ability to upload and delete files.
Tecrail Responsive Filemanager 9.8.1
445
VMScore
CVE-2018-18867
An SSRF issue exists in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495.
Tecrail Responsive Filemanager 9.13.4
570
VMScore
CVE-2018-20789
tecrail Responsive FileManager 9.13.4 allows remote malicious users to delete an arbitrary directory as a consequence of a paths[0] path traversal mitigation bypass through the delete_folder action in execute.php.
Tecrail Responsive Filemanager 9.13.4
570
VMScore
CVE-2018-20790
tecrail Responsive FileManager 9.13.4 allows remote malicious users to delete an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass through the delete_file action in execute.php.
Tecrail Responsive Filemanager 9.13.4
383
VMScore
CVE-2018-20791
tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mishandling of the media_preview action.
Tecrail Responsive Filemanager 9.13.4
445
VMScore
CVE-2018-20792
tecrail Responsive FileManager 9.13.4 allows remote malicious users to read arbitrary file via path traversal with the path parameter, through the get_file action in ajax_calls.php.
Tecrail Responsive Filemanager 9.13.4
445
VMScore
CVE-2018-20793
tecrail Responsive FileManager 9.13.4 allows remote malicious users to write to an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass, through the create_file action in execute.php.
Tecrail Responsive Filemanager 9.13.4
445
VMScore
CVE-2018-20794
tecrail Responsive FileManager 9.13.4 allows remote malicious users to write to an arbitrary image file (jpg/jpeg/png) via path traversal with the path parameter, through the save_img action in ajax_calls.php.
Tecrail Responsive Filemanager 9.13.4
445
VMScore
CVE-2018-20795
tecrail Responsive FileManager 9.13.4 allows remote malicious users to read arbitrary files via path traversal with the path parameter, through the copy_cut action in ajax_calls.php and the paste_clipboard action in execute.php.
Tecrail Responsive Filemanager 9.13.4
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49333
CVE-2024-33901
CVE-2024-36001
CVE-2024-2835
firewall
XPath injection
authentication bypass
CVE-2024-22120
CVE-2024-32002
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2