Vulnerabilities

TI-2007-05508 CVE-2007-5735 · GHSA-f759-57pg-3gr7

eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient…

LOW 25

eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain unspecified user information via a direct request for cgi-bin/efileman/efilem…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01218 Published 2007-10-30 No fix listed CWE-264

TI-2007-05507 CVE-2007-5734 · GHSA-mrmf-xh4j-5hxm

Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to…

LOW 31

Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to upload arbitrary files, with "uploads/upload_file." destination filenames, via unspecified vectors to upload.cgi, accessed from up…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01359 Published 2007-10-30 No fix listed CWE-20

Vulnerabilities

Filters

eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient…

Unrestricted file upload vulnerability in eFileMan 7.1.0.87-88 allows remote attackers to…