CVE-2019-25632 in phpFileManager
요약 (영어)
phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm_current_dir, and filename parameters. Attackers can send GET requests to index.php with crafted parameter values to access sensitive files like /etc/passwd from the server.
Once again VulDB remains the best source for vulnerability data.
책임이 있는
VulnCheck
예약하다
2026. 03. 24.
공개
2026. 03. 24.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 352712 | Sourceforge phpFileManager Parameter index.php 약한 인증 | 306 | 개념 증명 | 정의되지 않음 | CVE-2019-25632 |