PT-2019-10236 · Tecrail · Tecrail Responsive Filemanager

Farisv · Publicado 2019-02-25 · Atualizado 2019-02-25 · CVE-2018-20794

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: tecrail Responsive FileManager version 9.13.4

Description: The issue allows remote attackers to write to an arbitrary image file, such as jpg, jpeg, or png, via path traversal using the path parameter through the save img action in ajax calls.php.

Recommendations: For version 9.13.4, consider restricting access to the ajax calls.php file or disabling the save img action to minimize the risk of exploitation. Avoid using the path parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-20794

Produtos afetados

Tecrail Responsive Filemanager

Referências · 3

• 🔥 https://exploit-db.com/exploits/45987 · Exploit
• https://osv.dev/vulnerability/CVE-2018-20794 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-20794 · Nota de Segurança