Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 28/06/2023 Updated: 05/07/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tecrail responsive filemanager

PoC for Responsive Filemanager < 9.12.0 bypass upload restrictions lead to RCE

CVE-2022-44276-PoC PoC for Responsive Filemanager < 9120 bypass upload restrictions lead to RCE Where's vuln? When uploading new file we go through function fix_filename: githubcom/trippo/ResponsiveFilemanager/blob/9a7411f3eab3b7d8e2c78dcf40b4325bde2c548d/filemanager/uploadphp#L112 In this function we have function strip_tags which searches brackets and

CWE-434 https://github.com/HerrLeStrate/CVE-2022-44276-PoC https://nvd.nist.gov https://github.com/HerrLeStrate/CVE-2022-44276-PoC

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-44276

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect