CVE-2018-14728

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.

mitre·CWE-918·Published 2018-08-03

CVSS

—

EPSS

0.77

KEV

Exploits

cve.orgen

78 chars

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.

NVDen

78 chars

upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.

NVDes

113 chars

upload.php en Responsive FileManager 9.13.1 permite Server-Side Request Forgery (SSRF) mediante el parámetro url.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.0	Primary	NVD	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H