Exploitation Summary
EIP tracks 2 public exploits for CVE-2020-10567. PoCs published by PierreAdams.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2020-10567, which targets RESPONSIVE filemanager v.9.14.0. The exploit leverages improper input validation in ajax_calls.php?action=save_img to upload a malicious PHP file, achieving remote code execution.
Description
An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. This makes it possible to execute PHP code if a legitimate JPEG image contains this code in the EXIF data, and the .php extension is used in the name parameter. (A potential fast patch is to disable the save_img action in the config file.)
Exploits (2)
This repository contains a functional exploit for CVE-2020-10567, which targets RESPONSIVE filemanager v.9.14.0. The exploit leverages improper input validation in ajax_calls.php?action=save_img to upload a malicious PHP file, achieving remote code execution.
This repository contains a functional exploit for CVE-2020-10567, targeting RESPONSIVE filemanager v9.14.0. The exploit leverages improper input validation in ajax_calls.php?action=save_img to upload a malicious PHP file, achieving remote code execution.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H