Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
tecrail responsive filemanager vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2018-20791
tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mishandling of the media_preview action.
Tecrail Responsive Filemanager 9.13.4
5
CVSSv2
CVE-2018-20793
tecrail Responsive FileManager 9.13.4 allows remote malicious users to write to an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass, through the create_file action in execute.php.
Tecrail Responsive Filemanager 9.13.4
5
CVSSv2
CVE-2018-20795
tecrail Responsive FileManager 9.13.4 allows remote malicious users to read arbitrary files via path traversal with the path parameter, through the copy_cut action in ajax_calls.php and the paste_clipboard action in execute.php.
Tecrail Responsive Filemanager 9.13.4
5
CVSSv2
CVE-2018-18867
An SSRF issue exists in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495.
Tecrail Responsive Filemanager 9.13.4
6.4
CVSSv2
CVE-2018-20789
tecrail Responsive FileManager 9.13.4 allows remote malicious users to delete an arbitrary directory as a consequence of a paths[0] path traversal mitigation bypass through the delete_folder action in execute.php.
Tecrail Responsive Filemanager 9.13.4
6.4
CVSSv2
CVE-2018-20790
tecrail Responsive FileManager 9.13.4 allows remote malicious users to delete an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass through the delete_file action in execute.php.
Tecrail Responsive Filemanager 9.13.4
5
CVSSv2
CVE-2018-20792
tecrail Responsive FileManager 9.13.4 allows remote malicious users to read arbitrary file via path traversal with the path parameter, through the get_file action in ajax_calls.php.
Tecrail Responsive Filemanager 9.13.4
5
CVSSv2
CVE-2018-20794
tecrail Responsive FileManager 9.13.4 allows remote malicious users to write to an arbitrary image file (jpg/jpeg/png) via path traversal with the path parameter, through the save_img action in ajax_calls.php.
Tecrail Responsive Filemanager 9.13.4
7.5
CVSSv2
CVE-2018-14728
upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.
Tecrail Responsive Filemanager 9.13.1
4.3
CVSSv2
CVE-2018-18062
An issue exists in dialog.php in tecrail Responsive FileManager 9.8.1. A reflected XSS vulnerability allows remote malicious users to inject arbitrary web script or HTML.
Tecrail Responsive Filemanager 9.8.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
firewall
CVE-2024-35649
stored XSS
CVE-2022-28654
CVE-2020-35153
CVE-2024-27348
CVE-2022-28652
local users
CVE-2017-3506
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2