CVE-2020-10567
CRITICALResponsive Filemanager <9.14.0 - Code Injection
Title source: llmDescription
An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. This makes it possible to execute PHP code if a legitimate JPEG image contains this code in the EXIF data, and the .php extension is used in the name parameter. (A potential fast patch is to disable the save_img action in the config file.)
Exploits (1)
Scores
CVSS v3
9.8
EPSS
0.1072
EPSS Percentile
93.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-20
Status
published
Products (1)
tecrail/responsive_filemanager
< 9.14.0
Published
Mar 14, 2020
Tracked Since
Feb 18, 2026