PT-2018-14329 · Tecrail · Responsive Filemanager

Yavuz Atlas · Publicado 2018-10-10 · Atualizado 2018-11-28 · CVE-2018-18061

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions tecrail Responsive FileManager version 9.8.1

Description An issue was discovered in the dialog.php file, allowing attackers to access the file manager interface. This access provides attackers with the ability to upload and delete files.

Recommendations For version 9.8.1, consider restricting access to the dialog.php file until a patch is available. As a temporary workaround, limit the functionality of the file manager interface to prevent unauthorized file uploads and deletions.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-18061

Produtos afetados

Responsive Filemanager

Referências · 3

• 🔥 https://seclists.org/bugtraq/2018/Oct/25 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-18061 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-18061 · Aviso do Fabricante