PT-2018-14330 · Tecrail · Tecrail Responsive Filemanager

Yavuz Atlas · Published 2018-10-10 · Updated 2018-11-28 · CVE-2018-18062

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions tecrail Responsive FileManager version 9.8.1

Description A reflected XSS issue allows remote attackers to inject arbitrary web script or HTML. This occurs in the dialog.php file.

Recommendations For tecrail Responsive FileManager version 9.8.1, consider disabling the dialog.php file as a temporary workaround until a patch is available. Restrict access to this file to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-18062

Affected Products

Tecrail Responsive Filemanager

References · 3

• 🔥 https://seclists.org/bugtraq/2018/Oct/26 · Exploit
• https://osv.dev/vulnerability/CVE-2018-18062 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18062 · Security Note