Responsive FileManager 漏洞列表

Responsive filemanager 9.13.1 is susceptible to server-side request forgery in upload.php via the url parameter.

Responsive FileManager before version 9.13.4 is vulnerable to local file inclusion via filemanager/ajax_calls.php because it uses external input to construct a pathname that should be within a restricted directory, aka local file inclusion.

Responsive filemanager 9.13.1 is susceptible to server-side request forgery in upload.php via the url parameter.

Responsive FileManager before version 9.13.4 is vulnerable to local file inclusion via filemanager/ajax_calls.php because it uses external input to construct a pathname that should be within a restricted directory, aka local file inclusion.

【漏洞对象】tecrail Response FileManager 【涉及版本】tecrail Response FileManager 9.8.1【漏洞描述】 ResponsiveFilemanager是一个免费的开源文件管理器和图像管理器，由jQuery库，CSS3，PHP和HTML5组成，提供了一种漂亮而优雅的方式来上传和插入文件，图像和视频。ResponsiveFilemanager版本9.8.1允许远程攻击者绕过认证。该漏洞允许攻击者访问文件管理界面，提供上传，编辑和权限删除文件。