hackoclipse

remote code execution vulnerability in ajax_calls.php in save_img action because of no validation on extension name.

14

after taking another look at your application i noticed in the ajax_calls.php file in the "save_img" action that the "name" parameter doesn't validate the extension of the file. this makes...

After taking another look at the ResponsiveFilemanager 9.14.0 i noticed that in the dialog.php file on line 229 that if the $_SESSION['RF']['sort_by'] is already set that there would not be...

server side request forgery vulnerability in url uploader bypass CVE-2018-14728 by adding /favicon.ico to end of php file.

6

Good afternoon ResponsiveFilemanager, When i was doing a security test for a client of mine i noticed in your newest version of ResponsiveFilemanager 9.13.4 ( in 9.14.0 the url upload...