deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-10078
Published: 2019-02-23
Description: Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface/registerclient/onlineregfailure.php, and interface/registercustomer/onlineregfailure.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://seclists.org/fulldisclosure/2014/Aug/8; https://www.exploit-db.com/exploits/46549/
CVE: CVE-2014-10079
Published: 2019-02-23
Description: In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of the HTML source code, which is disclosed because of incorrect processing of an index.php/ trailing slash.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstormsecurity.com/files/127786/Vembu-Backup-Disaster-Recovery-6.1-Follow-Up.html; https://seclists.org/fulldisclosure/2014/Aug/8
CVE: CVE-2018-20785
Published: 2019-02-23
Description: Secure boot bypass and memory extraction can be achieved on Neato Botvac Connected 2.2.0 devices. During startup, the AM335x secure boot feature decrypts and executes firmware. Secure boot can be bypassed by starting with certain commands to the USB serial port. Although a power cycle occurs, this does not completely reset the chip: memory contents are still in place. Also, it restarts into a boot menu that enables XMODEM upload and execution of an unsigned QNX IFS system image, thereby completing the bypass of secure boot. Moreover, the attacker can craft custom IFS data and write it to unused memory to extract all memory contents that had previously been present. This includes the original firmware and sensitive information such as Wi-Fi credentials.
CVSS Score: 7.4 (HIGH)
References: https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners#t=745; https://media.ccc.de/v/2018-124-pinky-brain-are-taking-over-the-world-with-vacuum-cleaners#t=745
CVE: CVE-2019-9040
Published: 2019-02-23
Description: S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.iwantacve.cn/index.php/archives/113/; http://www.iwantacve.cn/index.php/archives/113/
CVE: CVE-2019-9041
Published: 2019-02-23
Description: An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:assert substring.
CVSS Score: 7.2 (HIGH)
CWE: CWE-917
References: http://www.iwantacve.cn/index.php/archives/118/; https://www.exploit-db.com/exploits/46454/; http://www.iwantacve.cn/index.php/archives/118/
CVE: CVE-2019-9042
Published: 2019-02-23
Description: An issue was discovered in Sitemagic CMS v4.4. In the index.php?SMExt=SMFiles URI, the user can upload a .php file to execute arbitrary code, as demonstrated by 404.php. This can only occur if the administrator neglects to set FileExtensionFilter and there are untrusted user accounts. NOTE: The maintainer states that this is not a vulnerability but a feature used in conjunction with External Modules
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: http://www.iwantacve.cn/index.php/archives/116/; http://www.iwantacve.cn/index.php/archives/116/
CVE: CVE-2019-9048
Published: 2019-02-23
Description: An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete a theme (aka topic) via a /admin.php?action=theme_delete&var1= URI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/pluck-cms/pluck/issues/69; https://github.com/pluck-cms/pluck/issues/69
CVE: CVE-2019-9049
Published: 2019-02-23
Description: An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete modules via a /admin.php?action=module_delete&var1= URI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/pluck-cms/pluck/issues/69; https://github.com/pluck-cms/pluck/issues/69
CVE: CVE-2019-9050
Published: 2019-02-23
Description: An issue was discovered in Pluck 4.7.9-dev1. It allows administrators to execute arbitrary code by using action=installmodule to upload a ZIP archive, which is then extracted and executed.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/pluck-cms/pluck/issues/70; https://github.com/pluck-cms/pluck/issues/70
CVE: CVE-2019-9051
Published: 2019-02-23
Description: An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete articles via a /admin.php?action=deletepage&var1= URI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/pluck-cms/pluck/issues/69; https://github.com/pluck-cms/pluck/issues/69
CVE: CVE-2019-9052
Published: 2019-02-23
Description: An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete pictures via a /admin.php?action=deleteimage&var1= URI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/pluck-cms/pluck/issues/69; https://github.com/pluck-cms/pluck/issues/69
CVE: CVE-2019-9047
Published: 2019-02-23
Description: GoRose v1.0.4 has SQL Injection when the order_by or group_by parameter can be controlled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/huzr2018/orderby_SQLi/tree/master/gorose; https://github.com/huzr2018/orderby_SQLi/tree/master/gorose
CVE: CVE-2019-9062
Published: 2019-02-23
Description: PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery (CSRF) in my-account.php.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: https://hackingvila.wordpress.com/2019/02/19/php-scripts-mall-online-food-ordering-script-has-cross-site-request-forgery-csrf-php-script-mall/; https://hackingvila.wordpress.com/2019/02/19/php-scripts-mall-online-food-ordering-script-has-cross-site-request-forgery-csrf-php-script-mall/
CVE: CVE-2019-9063
Published: 2019-02-23
Description: PHP Scripts Mall Auction website script 2.0.4 allows parameter tampering of the payment amount.
CVSS Score: 6.5 (MEDIUM)
References: https://hackingvila.wordpress.com/2019/02/21/php-scripts-mall-auction-website-script-has-parameter-tampering/; https://hackingvila.wordpress.com/2019/02/21/php-scripts-mall-auction-website-script-has-parameter-tampering/
CVE: CVE-2019-9064
Published: 2019-02-23
Description: PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://hackingvila.wordpress.com/2019/02/18/directory-traveler-or-path-traveler-vulnerability-in-cab-booking-script-php-script-mall/; https://hackingvila.wordpress.com/2019/02/18/directory-traveler-or-path-traveler-vulnerability-in-cab-booking-script-php-script-mall/
CVE: CVE-2019-9065
Published: 2019-02-23
Description: PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allows parameter tampering of the payment amount.
CVSS Score: 6.5 (MEDIUM)
References: https://hackingvila.wordpress.com/2019/02/21/php-scripts-mall-custom-t-shirt-ecommerce-script-has-parameter-tampering/; https://hackingvila.wordpress.com/2019/02/21/php-scripts-mall-custom-t-shirt-ecommerce-script-has-parameter-tampering/
CVE: CVE-2019-9066
Published: 2019-02-23
Description: PHP Scripts Mall PHP Appointment Booking Script 3.0.3 allows HTML injection in a user profile.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://hackingvila.wordpress.com/2019/02/22/php-scripts-mall-php-appointment-booking-script-has-html-injection-via-an-edit-my-profile/; https://hackingvila.wordpress.com/2019/02/22/php-scripts-mall-php-appointment-booking-script-has-html-injection-via-an-edit-my-profile/
CVE: CVE-2019-9070
Published: 2019-02-24
Description: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/107147; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=89395; https://security.gentoo.org/glsa/202107-24
CVE: CVE-2019-9071
Published: 2019-02-24
Description: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: http://www.securityfocus.com/bid/107147; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=89394; https://security.gentoo.org/glsa/202107-24
CVE: CVE-2019-9072
Published: 2019-02-24
Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in setup_group in elf.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=89396; https://security.gentoo.org/glsa/202107-24; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-9073
Published: 2019-02-24
Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://security.gentoo.org/glsa/202107-24; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://sourceware.org/bugzilla/show_bug.cgi?id=24233
CVE: CVE-2019-9074
Published: 2019-02-24
Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from pex64_get_runtime_function in pei-x86_64.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html; https://security.gentoo.org/glsa/202107-24
CVE: CVE-2019-9075
Published: 2019-02-24
Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html; https://security.gentoo.org/glsa/202107-24
CVE: CVE-2019-9076
Published: 2019-02-24
Description: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://security.gentoo.org/glsa/202107-24; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://sourceware.org/bugzilla/show_bug.cgi?id=24238
CVE: CVE-2019-9077
Published: 2019-02-24
Description: An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html; http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html; http://www.securityfocus.com/bid/107139
CVE: CVE-2019-8375
Published: 2019-02-24
Description: The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service (Buffer Overflow) or possibly have unspecified other impact, related to UIProcess/API/gtk/WebKitScriptDialogGtk.cpp, UIProcess/API/gtk/WebKitScriptDialogImpl.cpp, and UIProcess/API/gtk/WebKitWebViewGtk.cpp, as demonstrated by GNOME Web (aka Epiphany).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00058.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00005.html; https://bugs.webkit.org/show_bug.cgi?id=184875
CVE: CVE-2018-20786
Published: 2019-02-24
Description: libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/vim/vim/commit/cd929f7ba8cc5b6d6dcf35c8b34124e969fed6b8; https://github.com/vim/vim/issues/3711; https://usn.ubuntu.com/4309-1/
CVE: CVE-2019-9078
Published: 2019-02-24
Description: zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sCrIpT.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/NS-Sp4ce/ZZCMS-XSS/blob/master/xss.md; https://github.com/NS-Sp4ce/ZZCMS-XSS/blob/master/xss.md
CVE: CVE-2019-9081
Published: 2019-02-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2019-9082
Published: 2019-02-24
Description: ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-306, CWE-306
References: http://packetstormsecurity.com/files/157218/ThinkPHP-5.0.23-Remote-Code-Execution.html; https://github.com/xiayulei/open_source_bms/issues/33; http://packetstormsecurity.com/files/157218/ThinkPHP-5.0.23-Remote-Code-Execution.html
CVE: CVE-2019-9107
Published: 2019-02-25
Description: XSS exists in WUZHI CMS 4.1.0 via index.php?m=attachment&f=imagecut&v=init&imgurl=[XSS] to coreframe/app/attachment/imagecut.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/redeye5/ccbbc43330cc[PII_REDACTED]b78c916317; https://github.com/wuzhicms/wuzhicms/issues/169; https://gist.github.com/redeye5/ccbbc43330cc[PII_REDACTED]b78c916317
CVE: CVE-2019-9108
Published: 2019-02-25
Description: XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=[XSS]&y=[XSS] to coreframe/app/core/map.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/redeye5/ebfef23f0a063b82779151f9cde8e480; https://github.com/wuzhicms/wuzhicms/issues/171; https://gist.github.com/redeye5/ebfef23f0a063b82779151f9cde8e480
CVE: CVE-2019-9109
Published: 2019-02-25
Description: XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=[XSS] to coreframe/app/message/message.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/redeye5/57ccafea7263efec67c82b0503c72480; https://github.com/wuzhicms/wuzhicms/issues/172; https://gist.github.com/redeye5/57ccafea7263efec67c82b0503c72480
CVE: CVE-2019-9110
Published: 2019-02-25
Description: XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&set_iframe=[XSS] to coreframe/app/content/postinfo.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/redeye5/470708bd27ed115b29d0434255b9f7a0; https://github.com/wuzhicms/wuzhicms/issues/170; https://gist.github.com/redeye5/470708bd27ed115b29d0434255b9f7a0
CVE: CVE-2018-20787
Published: 2019-02-25
Description: The ft5x46 touchscreen driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the size argument in tpdbg_write in drivers/input/touchscreen/ft5x46/ft5x46_ts.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/991; https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/991
CVE: CVE-2018-20788
Published: 2019-02-25
Description: drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has several integer overflows because of a left-shifting operation when the right-hand operand can be equal to or greater than the integer length. This can be exploited by a crafted application for denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/973; https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/973
CVE: CVE-2019-9111
Published: 2019-02-25
Description: The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in sde_evtlog_filter_write in drivers/gpu/drm/msm/sde_dbg.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/1001; https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/1001
CVE: CVE-2019-9112
Published: 2019-02-25
Description: The msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 has an integer overflow and OOPS because of missing checks of the count argument in _sde_debugfs_conn_cmd_tx_write in drivers/gpu/drm/msm/sde/sde_connector.c. This is exploitable for a device crash via a syscall by a crafted application on a rooted device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/1000; https://github.com/MiCode/Xiaomi_Kernel_OpenSource/issues/1000
CVE: CVE-2019-9113
Published: 2019-02-25
Description: Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: https://github.com/libming/libming/issues/171; https://github.com/libming/libming/issues/171
CVE: CVE-2019-9114
Published: 2019-02-25
Description: Ming (aka libming) 0.4.8 has an out of bounds write vulnerability in the function strcpyext() in the decompile.c file in libutil.a.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/libming/libming/issues/170; https://github.com/libming/libming/issues/170
CVE: CVE-2019-9115
Published: 2019-02-25
Description: In irisnet-crypto before 1.1.7 for IRISnet, the util/utils.js file allows code execution because of unsafe eval usage.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/irisnet/irisnet-crypto/issues/60; https://github.com/irisnet/irisnet-crypto/issues/60
CVE: CVE-2019-9122
Published: 2019-02-25
Description: An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the ntp_server parameter in an ntp_sync.cgi POST request.
CVSS Score: 8.8 (HIGH)
References: https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/command%20injection.md; https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/command%20injection.md
CVE: CVE-2019-9123
Published: 2019-02-25
Description: An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. The "user" account has a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/Permission%20access%20control.md; https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/Permission%20access%20control.md
CVE: CVE-2019-9124
Published: 2019-02-25
Description: An issue was discovered on D-Link DIR-878 1.12B01 devices. At the /HNAP1 URI, an attacker can log in with a blank password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-878/blankpassword.md; https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-878/blankpassword.md
CVE: CVE-2019-9125
Published: 2019-02-25
Description: An issue was discovered on D-Link DIR-878 1.12B01 devices. Because strncpy is misused, there is a stack-based buffer overflow vulnerability that does not require authentication via the HNAP_AUTH HTTP header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-787
References: https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-878/overflow1.md; https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-878/overflow2.md; https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-878/overflow1.md
CVE: CVE-2019-9126
Published: 2019-02-25
Description: An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the router_info.xml document. This will reveal the PIN code, MAC address, routing table, firmware version, update time, QOS information, LAN information, and WLAN information of the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/information%20disclosure.md; https://github.com/WhooAmii/whooamii.github.io/blob/master/2018/DIR-825/information%20disclosure.md
CVE: CVE-2018-20789
Published: 2019-02-25
Description: tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary directory as a consequence of a paths[0] path traversal mitigation bypass through the delete_folder action in execute.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/45987; https://www.exploit-db.com/exploits/45987
CVE: CVE-2018-20790
Published: 2019-02-25
Description: tecrail Responsive FileManager 9.13.4 allows remote attackers to delete an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass through the delete_file action in execute.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/45987; https://www.exploit-db.com/exploits/45987
CVE: CVE-2018-20791
Published: 2019-02-25
Description: tecrail Responsive FileManager 9.13.4 allows XSS via a media file upload with an XSS payload in the name, because of mishandling of the media_preview action.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/45987; https://www.exploit-db.com/exploits/45987
CVE: CVE-2018-20792
Published: 2019-02-25
Description: tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through the get_file action in ajax_calls.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/45987; https://www.exploit-db.com/exploits/45987
CVE: CVE-2018-20793
Published: 2019-02-25
Description: tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary file as a consequence of a paths[0] path traversal mitigation bypass, through the create_file action in execute.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/45987; https://www.exploit-db.com/exploits/45987
CVE: CVE-2018-20794
Published: 2019-02-25
Description: tecrail Responsive FileManager 9.13.4 allows remote attackers to write to an arbitrary image file (jpg/jpeg/png) via path traversal with the path parameter, through the save_img action in ajax_calls.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/45987; https://www.exploit-db.com/exploits/45987
CVE: CVE-2018-20795
Published: 2019-02-25
Description: tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path parameter, through the copy_cut action in ajax_calls.php and the paste_clipboard action in execute.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/45987; https://www.exploit-db.com/exploits/45987