CVE-2018-15536

5.5 mediumEPSS 6.3%

Medium (5.5) in tecrail responsive filemanager. EPSS 6.3% chance of exploitation in the next 30 days.

/filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 does not properly validate file paths in archives, allowing for the extraction of crafted archives to overwrite arbitrary files via an extract action, aka Directory Traversal.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 6.3% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2018-08-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tecrail:responsive_filemanager

References

http://seclists.org/fulldisclosure/2018/Aug/34
https://www.exploit-db.com/exploits/45271/
http://seclists.org/fulldisclosure/2018/Aug/34
https://www.exploit-db.com/exploits/45271/

Check your stack JSON