Responsive filemanager 9.13.1 is susceptible to server-side request forgery in upload.php via the url parameter.
View the template here CVE-2018-14728.yaml
References:
http://packetstormsecurity.com/files/148742/Responsive-Filemanager-9.13.1-Server-Side-Request-Forgery.html