Description
Due to several vulnerablility in elFinder, an attacker can execute arbitrary code and commands on the server hosting the elFinder.
Remediation
Upgrade to the latest version of elFinder
References
Related Vulnerabilities
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Directory Traversal (5.1.4)
Microsoft Exchange Server Server-Side Request Forgery (SSRF) vulnerability
WordPress Cookie Data PHP Code Injection Vulnerability (1.5 - 1.5.1.3)
Apache 2.2.14 mod_isapi Dangling Pointer
WordPress Plugin WordPress File Upload Directory Traversal (4.12.2)