CVE-2018-11346

An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability to reference the "download_sys_settings" action and then specify files arbitrarily throughout the system via the act parameter.

• CWE-425

• http://seclists.org/fulldisclosure/2018/May/2Exploit, Mailing List, Third Party Advisory
• https://github.com/mefulton/asustorexploitExploit, Third Party Advisory
• https://www.purehacking.com/blog/matthew-fulton/back-to-the-future-asustor-web-exploitationExploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2018/May/2Exploit, Mailing List, Third Party Advisory
• https://github.com/mefulton/asustorexploitExploit, Third Party Advisory
• https://www.purehacking.com/blog/matthew-fulton/back-to-the-future-asustor-web-exploitationExploit, Third Party Advisory

Published

May 22, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11340An unrestricted file upload vulnerability in importuser.cgi …
• CVE-2018-11341Directory traversal in importuser.cgi in ASUSTOR AS6202T ADM…
• CVE-2018-11342A path traversal vulnerability in fileExplorer.cgi in ASUSTO…
• CVE-2018-11343A persistent cross site scripting vulnerability in playlistm…
• CVE-2018-11344A path traversal vulnerability in download.cgi in ASUSTOR AS…
• CVE-2018-11345An unrestricted file upload vulnerability in upload.cgi in A…
• CVE-2018-11347The YunoHost 2.7.2 through 2.7.14 web application is affecte…
• CVE-2018-11348Two XSS vulnerabilities are located in the profile edition p…
• CVE-2018-11349The administration panel of Jirafeau before 3.4.1 is vulnera…
• CVE-2018-1135An issue was discovered in Moodle 3.x. Students who posted o…
• CVE-2018-11350An issue was discovered in Jirafeau before 3.4.1. The file "…
• CVE-2018-11351script.php in Jirafeau before 3.4.1 is affected by two store…