Skip to content

CVE-2018-20795 tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path parameter, through the copy_cut action in ajax_calls.php and the paste_clipboard....

HighCVSS 7.5 EPSS 3.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path parameter, through the copy_cut action in ajax_calls.php and the paste_clipboard action in execute.php.

Affected products

ProductAffected versionsFixed in
Tecrail Responsive FileManager = 9.13.4 No fix listed

References

  • 45987 exploit third-party-advisory vdb-entry