CVE-2023-52045

Description

References

• Studio-42/elFinder · Exploit

Autres vulnérabilités de elfinder

• CVE-2026-41247CRITIQUE 9.8elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.67, elFinder contains a command injecti…
• CVE-2023-52044CRITIQUE 9.8Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extensi…
• CVE-2024-38909CRITIQUE 9.8Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories…
• CVE-2023-35840MOYENNE 6.5_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.
• CVE-2022-27115CRITIQUE 9.8In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.