CVE-2021-44663

The CVE-2021-44663 vulnerability affects Xerte Project (Xerte) up to version 3.8.4, where remote code execution can be triggered via a crafted PHP file uploaded through elfinder in connector.php. The underlying issue enables network-exposed RCE with high impact (as indicated by CVSS scores in the...

Studio 42 elFinder allows stored XSS

Studio 42 elFinder through 2.1.31 allows XSS via an SVG document...

GHSA-C3J8-Q5X6-2855 Studio 42 elFinder allows stored XSS

Studio 42 elFinder through 2.1.31 allows XSS via an SVG document...

CVE-2021-45919

Studio 42 elFinder through 2.1.31 allows XSS via an SVG document...

CVE-2021-45919

Studio 42 elFinder through 2.1.31 allows XSS via an SVG document...

CVE-2021-45919

Studio 42 elFinder through 2.1.31 allows XSS via an SVG document...

Design/Logic Flaw

Studio 42 elFinder through 2.1.31 allows XSS via an SVG document...

CVE-2021-45919

Studio 42 elFinder through 2.1.31 allows XSS via an SVG document...

CVE-2021-45919

Studio 42 elFinder versions up to 2.1.31 are affected by a cross-site scripting (XSS) vulnerability involving SVG data handling. The vulnerability stems from insecure handling of SVG document data, enabling client-side code execution. Affected product is elFinder (Studio 42), with the issue docum...

Studio 42 elFinder 跨站脚本漏洞

Studio 42 elFinder is an open source web file manager that uses jQuery and jQuery UI and is written in JavaScript. A cross-site scripting vulnerability exists in Studio 42 elFinder that stems from the product's failure to securely handle SVG document data. The vulnerability can be exploited to...

ElFinder File Manager Command Injection (CVE-2021-32682)

A command injection vulnerability exists in ElFinder. The vulnerability is due to insufficient validation of the file name when creating an archive...

CVE-2021-32172

Maian Cart v3.8 contains a preauthorization remote code execution RCE exploit via a broken access control issue in the Elfinder plugin...

CVE-2021-32172

Maian Cart v3.8 contains a preauthorization remote code execution RCE exploit via a broken access control issue in the Elfinder plugin...

Improper access control

Maian Cart v3.8 contains a preauthorization remote code execution RCE exploit via a broken access control issue in the Elfinder plugin...

CVE-2021-32172

Maian Cart v3.8 contains a preauthorization remote code execution RCE exploit via a broken access control issue in the Elfinder plugin...

CVE-2021-32172

Maian Cart =3.8 (patched). If applicable, refer to the linked disclosures for technical details and exploit examples. If not already done, monitor for updates from vendors and security advisories.

Maian Script World Maian Cart 安全漏洞

Maian Script World Maian Cart is a powerful e-commerce system from Maian Script World, UK. A security vulnerability exists in Maian Cart v3.8, which stems from an access control issue in the Elfinder plugin...

elFinder Archive Command Injection

elFinder versions below 2.1.59 are vulnerable to a command injection vulnerability via its archive functionality. When creating a new zip archive, the name parameter is sanitized with the escapeshellarg php function and then passed to the zip utility. Despite the sanitization, supplying the -TmTT...

Metasploit Wrap-Up

Clone your way to code execution We’ve had a busy week bringing you exploits, features, enhancements, and fixes. Exploit modules for Git and El Finder lead the pack this week with an information disclosure against Jira and a post exploitation module targeting Geutebruck white-labelled cameras to...

elFinder Archive Command Injection Exploit

elFinder versions below 2.1.59 are vulnerable to a command injection vulnerability via its archive functionality. When creating a new zip archive, the name parameter is sanitized with the escapeshellarg php function and then passed to the zip utility. Despite the sanitization, supplying the -TmTT...