PT-2020-7476 · Easytime Studio · Easy File Manager

Published 2020-01-24 · Updated 2020-02-04 · CVE-2013-3960

Positive Technologies (AI Summary)

CVSS v2.0

8.7

High

Base vector

AV:N/AC:L/Au:S/C:P/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Easytime Studio Easy File Manager version 1.1

Description: The issue concerns a security bypass related to HTTP requests.

Recommendations: For Easytime Studio Easy File Manager version 1.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2013-3960

Affected Products

Easy File Manager

References · 3

• 🔥 https://trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18896 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3960 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89171 · Note