.. / CVE-2018-15535

• LFI
• Nuclei
• Web

Exploit for Responsive FileManager <9.13.4 - Local File Inclusion (CVE-2018-15535)

Description:

Responsive FileManager before version 9.13.4 is vulnerable to local file inclusion via filemanager/ajax_calls.php because it uses external input to construct a pathname that should be within a restricted directory, aka local file inclusion.

Nuclei Template

View the template here CVE-2018-15535.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-15535.yaml

References: