CVE-2018-20795: Tecrail Responsive Filemanager

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary files via path traversal with the path parameter, through the copy_cut action in ajax_calls.php and the paste_clipboard action in execute.php.

Affected products

• Tecrail Responsive Filemanager: version 9.13.4 only

Published 2019-02-25. Last modified 2026-06-17.