CVE-2018-15535

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

45.24%

Published

Aug 24, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (3)

All weaponized →

Exploit-DBResponsive FileManager < 9.13.4 - Directory Traversal NucleiNuclei detection template TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

/filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize get_file sequences such as ".." that can resolve to a location that is outside of that directory, aka Directory Traversal.

Weaknesses (CWE)

CWE-22

Affected Products (1)

tecrail · responsive_filemanager (up to 9.13.4)vulnerable

References (4)

http://seclists.org/fulldisclosure/2018/Aug/34

ExploitMailing ListThird Party Advisory

https://www.exploit-db.com/exploits/45271/

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2018/Aug/34

ExploitMailing ListThird Party Advisory

https://www.exploit-db.com/exploits/45271/

ExploitThird Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs