Описание
Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2006-3160
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27306
- http://secunia.com/advisories/20668
- http://www.osvdb.org/26665
- http://www.securityfocus.com/archive/1/437671/100/100/threaded
- http://www.securityfocus.com/bid/18534
- http://www.vupen.com/english/advisories/2006/2435
EPSS
Процентиль: 67%
0.00527
Низкий
CVE ID
Связанные уязвимости
nvd
больше 19 лет назад
Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
EPSS
Процентиль: 67%
0.00527
Низкий