Security Advisories for studio-42/elfinder in packagist
High
about 2 months ago
elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)
packagist
Studio-42/elFinder
Moderate
about 2 months ago
elFinder: CSRF in netmount allows forced FTP mounts and server-side FTP connections
packagist
studio-42/elfinder
High
about 2 months ago
elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback
packagist
studio-42/elfinder
High
6 months ago
elFinder MySQL has a SQL Injection in its Volume Driver (elFinderVolumeMySQL)
packagist
studio-42/elfinder
High
6 months ago
elFinder: Command injection in resize background color parameter when using ImageMagick CLI
packagist
studio-42/elfinder
High
about 2 years ago
Studio 42 elFinder vulnerable to Incorrect Access Control
packagist
studio-42/elfinder
High
over 3 years ago
elFinder vulnerable to path traversal in LocalVolumeDriver connector
packagist
studio-42/elfinder
Critical
over 4 years ago
elFinder command injection vulnerability in the PHP connector
packagist
studio-42/elfinder
Critical
over 4 years ago
RCE in Studio-42 elFinder on Windows before 2.1.61
packagist
studio-42/elfinder
Critical
over 4 years ago
elFinder Unrestricted File Upload vulnerability
packagist
studio-42/elfinder
Critical
over 4 years ago
Path Traversal in Studio-42 elFinder through 2.1.60
packagist
studio-42/elfinder
Critical
over 5 years ago
elFinder before 2.1.59 contains multiple vulnerabilities leading to RCE
packagist
studio-42/elfinder
High
over 5 years ago
elFinder unsafe upload filtering leading to remote code execution
packagist
studio-42/elfinder