Twenty Year Anniversary

Responsive Filemanager 9.8.1 Cross Site Scripting

Responsive Filemanager 9.8.1 Cross Site Scripting
Posted Oct 9, 2018
Authored by Yavuz Atlas

Responsive Filemanager version 9.8.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2018-18062
MD5 | e57866e9ceecaf92811e3d760b50d6b7

Responsive Filemanager 9.8.1 Cross Site Scripting

Change Mirror Download
I. VULNERABILITY
-------------------------
Responsive Filemanager 9.8.1 Reflected Cross Site Scripting (XSS)

II. CVE REFERENCE
-------------------------
CVE-2018-18062

III. VENDOR
-------------------------
https://www.responsivefilemanager.com

IV. REFERENCES
-------------------------
https://vulmon.com/vulnerabilitydetails?qid=CVE-2018-18062

V. CREDIT
-------------------------
Yavuz Atlas of Biznet Bilisim
http://www.biznet.com.tr/biznet-guvenlik-duyurulari

VI. DESCRIPTION
-------------------------
Responsive Filemanager version 9.8.1 is vulnerable to cross-site
scripting. A remote attacker could exploit this vulnerability via a
crafted URL to execute script in a victim's Web browser within the
security context of the hosting Web site, once the URL is clicked. An
attacker could use this vulnerability to steal the victim's
cookie-based authentication credentials.

VII. PROOF OF CONCEPT
-------------------------
http://localhost/filemanager/dialog.php?secretkey="/><script>alert(1)</script>

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

November 2018

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    10 Files
  • 2
    Nov 2nd
    15 Files
  • 3
    Nov 3rd
    2 Files
  • 4
    Nov 4th
    2 Files
  • 5
    Nov 5th
    32 Files
  • 6
    Nov 6th
    27 Files
  • 7
    Nov 7th
    8 Files
  • 8
    Nov 8th
    9 Files
  • 9
    Nov 9th
    17 Files
  • 10
    Nov 10th
    2 Files
  • 11
    Nov 11th
    2 Files
  • 12
    Nov 12th
    33 Files
  • 13
    Nov 13th
    29 Files
  • 14
    Nov 14th
    23 Files
  • 15
    Nov 15th
    45 Files
  • 16
    Nov 16th
    11 Files
  • 17
    Nov 17th
    0 Files
  • 18
    Nov 18th
    0 Files
  • 19
    Nov 19th
    0 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    0 Files
  • 22
    Nov 22nd
    0 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    0 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2018 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close