PRODUCT PROFILE

file_manager

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

严重CVE-2020-252132020/09/10

WordPress File Manager Plugin - Remote Code Execution

The WordPress File Manager plugin prior to version 6.9 is susceptible to remote code execution. The vulnerability allows unauthenticated remote attackers to upload .php files.

file_managerPoC 已收录RCE

CVSS9.8EPSS 94.4%

高危CVE-2020-243122020/08/26

WordPress Plugin File Manager (wp-file-manager) Backup Disclosure

mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups directory with a .htaccess file. This results in the ability for unauthenticated users to browse and download any site backups, which sometimes include full database backups, that the plugin has taken.

file_managerPoC 已收录

CVSS7.5EPSS 50.9%