Skip to content

CVE-2018-20792 tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through the get_file action in ajax_calls.php.

HighCVSS 7.5 EPSS 3.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through the get_file action in ajax_calls.php.

Affected products

ProductAffected versionsFixed in
Tecrail Responsive FileManager = 9.13.4 No fix listed

References

  • 45987 exploit third-party-advisory vdb-entry