critical9.8Public exploit code
CVE-2018-14728
upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Responsive Filemanager 9.13.1 - Server-Side Request Forgery2018-07-30 · webapps · linux
Impact
upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tecrail | Responsive Filemanager | Version 9.13.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/148742/Responsive-Filemanager-9.13.1-Server-Side-Request-Forgery.html
- https://www.exploit-db.com/exploits/45103/
- http://packetstormsecurity.com/files/148742/Responsive-Filemanager-9.13.1-Server-Side-Request-Forgery.html
- https://www.exploit-db.com/exploits/45103/