CVE-2018-20792: Tecrail Responsive Filemanager

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through the get_file action in ajax_calls.php.

Affected products

• Tecrail Responsive Filemanager: version 9.13.4 only

Published 2019-02-25. Last modified 2026-06-17.