CVE-2023-52045

Description

References

• Studio-42/elFinder · Exploit

Weitere Schwachstellen in elfinder

• CVE-2026-41247KRITISCH 9.8elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.67, elFinder contains a command injecti…
• CVE-2023-52044KRITISCH 9.8Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extensi…
• CVE-2024-38909KRITISCH 9.8Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories…
• CVE-2023-35840MITTEL 6.5_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.
• CVE-2022-27115KRITISCH 9.8In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.