elFinder command injection vulnerability in the PHP connector

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2019-9194 · ADVISORY
• Studio-42/elFinder commit 374c88d · WEB
• FriendsOfPHP/security-advisories · WEB
• Studio-42/elFinder · PACKAGE
• Studio-42/elFinder · WEB
• Studio-42/elFinder · WEB
• Studio-42/elFinder release 2.1.48 · WEB
• exploit-db.com/exploits/46481 · WEB
• exploit-db.com/exploits/46539 · WEB
• exploit-db.com/exploits/46481 · Exploit
• exploit-db.com/exploits/46539 · Exploit

Lỗ hổng khác của studio-42/elfinder

• CVE-2026-81890TRUNG BÌNH 5.4elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, the netmount command is omitted fro…
• CVE-2026-81889CAO 8.6elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, elFinder URL uploads in php/elFinde…
• CVE-2026-44521CAO 8.8elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.68, an authenticated SQL injection vuln…
• CVE-2026-41247NGHIÊM TRỌNG 9.8elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.67, elFinder contains a command injecti…
• CVE-2024-38909NGHIÊM TRỌNG 9.8Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension between server directories…