Vulnerabilities in File Manager

8 results

Vexday analysis

File Manager apresenta 8 vulnerabilidades conhecidas no Vexday, com 1 classificada como crítica, mas nenhuma sob exploração ativa no momento. A fraqueza predominante (CWE-434 - Upload de arquivo irrestrito) sugere risco de execução de código malicioso, embora o portfólio não tenha recebido atualizações de risco nos últimos 90 dias, indicando que a ameaça atual não está em fase de exploração em larga escala.

CVE-2023-6846HIGHFile Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 15.9%CVE-2023-6825CRITICALFile Manager And File Manager Pro (Multiple Versions) - Directory TraversalEPSS 6.0%CVE-2024-7559HIGHFile Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.9%CVE-2025-0818MEDIUMMultiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File DeletionEPSS 0.7%CVE-2024-8746HIGHFile Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and UploadEPSS 0.6%CVE-2023-7015MEDIUMFile Manager Pro <= 8.3.4 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2024-8918HIGHFile Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File UploadEPSS 0.3%CVE-2024-8507HIGHFile Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File UploadEPSS 0.2%