CVE-2024-5673

Vulnerability in Dulldusk's PHP File Manager affecting version 1.7.8. This vulnerability consists of an XSS through the fmcurrentdir parameter of index.php. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session...

CVE-2024-5673: Improper Neutralization of Input During Web Page Generation

Vulnerability in Dulldusk's PHP File Manager affecting version 1.7.8. This vulnerability consists of an XSS through the fmcurrentdir parameter of index.php. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session...

PT-2024-37043

Name of the Vulnerable Software and Affected Versions Dulldusk's PHP File Manager version 1.7.8 Description The issue consists of a Cross-Site Scripting XSS vulnerability through the fm current dir parameter of the "index.php" endpoint. An attacker could send a specially crafted JavaScript payloa...