Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. This makes it possible to execute PHP code if a legitimate JPEG image contains this code in the EXIF data, and the .php extension is used in the name parameter. (A potential fast patch is to disable the save_img action in the config file.)
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tecrail Responsive FileManager 输入验证错误漏洞
Vulnerability Description
Tecrail Responsive FileManager是意大利Tecrail公司的一款使用PHP语言编写的开源文件管理器。该产品支持视频、图像或其他文件的上传和管理。 Tecrail Responsive FileManager 9.14.0及之前版本中的ajax_calls.php文件存在安全漏洞，该漏洞源于程序没有对发送的文件类型进验证。攻击者可利用该漏洞执行PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A