CVE-2019-25632
Local File Inclusion in phpFileManager 1.7.8 Allows Arbitrary File Read
Publication date: 2026-03-24
Last updated on: 2026-03-25
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| dulldusk | phpfilemanager | 1.7.8 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-306 | The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
phpFileManager version 1.7.8 contains a Local File Inclusion (LFI) vulnerability that allows unauthenticated attackers to read arbitrary files on the server.
This vulnerability arises because the application does not properly validate or sanitize the parameters action, fm_current_dir, and filename in the index.php file.
Attackers can send crafted GET requests manipulating these parameters to access sensitive files such as /etc/passwd.
How can this vulnerability impact me? :
This vulnerability allows attackers to read sensitive files on the server without any authentication.
By accessing files like /etc/passwd, attackers can gather critical system information which may aid in further attacks or compromise.
The exposure of sensitive data can lead to information disclosure, potentially harming the confidentiality of your system.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
[{'type': 'paragraph', 'content': "This vulnerability can be detected by sending crafted HTTP GET requests to the vulnerable phpFileManager's index.php endpoint, manipulating the parameters action, fm_current_dir, and filename to attempt to read sensitive files."}, {'type': 'paragraph', 'content': 'A typical detection command using curl would be:'}, {'type': 'list_item', 'content': 'curl "http://target/index.php?action=3&fm_current_dir=/etc/&filename=passwd"'}, {'type': 'paragraph', 'content': 'If the response contains the contents of the /etc/passwd file or other sensitive files, the system is vulnerable.'}, {'type': 'paragraph', 'content': 'Additionally, a proof-of-concept Python script exists that automates this detection by sending crafted requests and displaying file contents.'}] [1, 2]
What immediate steps should I take to mitigate this vulnerability?
I don't know