CVE-2022-46604
HIGH EXPLOITEDTecrail Responsive FileManager <9.9.5 - Code Injection
Title source: llmExploitation Summary
CVE-2022-46604 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits from researchers including Galoget Latorre, galoget, CyberQuestor-infosec.
AI-analyzed exploit summary This exploit leverages a file creation extension bypass vulnerability in Responsive FileManager 9.9.5 to upload a PHP webshell, enabling remote code execution (RCE). It interacts with the webshell to execute arbitrary commands on the target system.
Description
An issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechanism and upload a crafted PHP file, leading to arbitrary code execution.
Exploits (3)
This exploit leverages a file creation extension bypass vulnerability in Responsive FileManager 9.9.5 to upload a PHP webshell, enabling remote code execution (RCE). It interacts with the webshell to execute arbitrary commands on the target system.
This is a Python-based exploit for CVE-2022-46604, which bypasses file creation extensions in Responsive FileManager ≤ 9.9.5 to achieve remote code execution (RCE) via a webshell upload. The exploit automates the process of obtaining a session, creating a malicious PHP file, and interacting with the webshell.
This repository contains a Python-based exploit for CVE-2022-46604, a directory traversal vulnerability in Responsive File Manager 9.13.4. The exploit automates the process of copying and pasting files to leak sensitive data via path traversal.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H