PT-2018-14329 · Tecrail · Responsive Filemanager

Yavuz Atlas · Published 2018-10-10 · Updated 2018-11-28 · CVE-2018-18061

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions tecrail Responsive FileManager version 9.8.1

Description An issue was discovered in the dialog.php file, allowing attackers to access the file manager interface. This access provides attackers with the ability to upload and delete files.

Recommendations For version 9.8.1, consider restricting access to the dialog.php file until a patch is available. As a temporary workaround, limit the functionality of the file manager interface to prevent unauthorized file uploads and deletions.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2018-18061

Affected Products

Responsive Filemanager

References · 3

• 🔥 https://seclists.org/bugtraq/2018/Oct/25 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-18061 · Security Note
• https://osv.dev/vulnerability/CVE-2018-18061 · Vendor Advisory