CVE-2022-46604

概要

参考情報

• packetstormsecurity.com/files/171720/Responsive-FileManager-9.9.5-Remote-Shell-Upload.html
• trippo/ResponsiveFilemanager · Third Party Advisory
• trippo/ResponsiveFilemanager · Release Notes
• medium.com/%40_sadshade/file-extention-bypass-in-responsive-filemanager-9-5-5-leading-to-rce-authenticated-3290eddc54e7

responsive filemanager のその他の脆弱性

• CVE-2022-44276緊急 9.8In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.
• CVE-2017-20145緊急 9.8A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal…
• CVE-2020-11106中 6.1An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the session variable $_SESSION['RF']["view_type"] …
• CVE-2020-10567緊急 9.8An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, t…
• CVE-2020-10212緊急 9.8upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and b…