File and Path Handling

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. elFinder <=2.1.60 - Local File InclusionCVE-2022-26960Std42 · 51% likely

   CWE-22

2. Studio-42 elFinder <2.1.60 - Arbitrary File UploadCVE-2021-43421Std42 · 43% likely

   CWE-434

3. elFinder < 2.1.58 - Remote Code ExecutionCVE-2021-23394Std42 · CVSS 8.1 · 19% likely

   CWE-434

4. In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.CVE-2022-27115Std42 · 29% likely

   CWE-434

5. Studio 42 elFinder before 2.1.36 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to download files accessi…CVE-2018-9109Std42 · 2.9% likely

   CWE-22

6. Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to download files accessi…CVE-2018-9110Std42 · 2.9% likely

   CWE-22

7. _joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector.CVE-2023-35840Std42 · CVSS 6.5 · 1.9% likely

   CWE-22

8. Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension.CVE-2023-52044Std42 · CVSS 9.8 · 0.8% likely

   CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.