CVE-2021-32161

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...

Cross site scripting

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...

CVE-2021-32162

A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...

Cross site request forgery (csrf)

A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...

CVE-2021-32162

The connected documents establish CVE-2021-32162 as a CSRF vulnerability in Webmin 1.973 via the File Manager feature, caused by missing token validation for CSRF protection. The issue potentially allows an attacker to trick victims into performing sensitive actions through the Webmin interface w...

CVE-2021-32162

A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...

CVE-2021-32161

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...

CVE-2021-32161

CVE-2021-32161 is an XSS vulnerability in Webmin 1.973 via the File Manager feature. It stems from insufficient input sanitization of user-supplied parameters in the File Manager, enabling attacker-controlled JavaScript in the user’s browser. Affected: Webmin (version 1.973) and its File Manager....

PT-2022-10070

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description A Cross-Site Scripting XSS issue exists in the File Manager feature. Recommendations For Webmin version 1.973, consider disabling the File Manager feature until a patch is available. Restrict access to the File...

PT-2022-10071

Name of the Vulnerable Software and Affected Versions Webmin version 1.973 Description A Cross-site request forgery CSRF vulnerability exists in the File Manager feature. This issue allows for malicious requests to be made on behalf of the user, potentially leading to unauthorized actions...

CVE-2021-32162: Cross-Site Request Forgery (CSRF)

A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...

CVE-2021-32161: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...

PT-2022-2945

Name of the Vulnerable Software and Affected Versions Adobe Bridge versions 12.0.1 and earlier Description The issue is related to insufficient input validation in the file manager, which can lead to arbitrary code execution in the context of the current user. Exploitation requires user...

PT-2022-2942

Name of the Vulnerable Software and Affected Versions Adobe Bridge versions prior to 12.0.1 Description The issue is related to insufficient input validation in the file manager, which can allow an attacker to execute arbitrary code by opening a malicious file. Exploitation requires user...

PT-2022-2993

Name of the Vulnerable Software and Affected Versions Adobe Bridge versions 12.0.1 and earlier Description The issue is related to an out-of-bounds read vulnerability in the file manager, which could allow an attacker to disclose sensitive memory information. This vulnerability can be exploited b...

PT-2022-3016

Name of the Vulnerable Software and Affected Versions Adobe Bridge versions 12.0.1 and earlier Description The issue is related to insufficient input validation in the file manager, which could allow an attacker to execute arbitrary code. Exploitation requires user interaction, where a victim mus...

WordPress Library File Manager plugin跨站请求伪造漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Library File Manager plugin has a cross-site request forgery vulnerability, which stems from the fact that the plugin uses a...

Studio 42 elFinder code issue and vulnerabilities

Studio 42 elFinder is an open source web file manager that uses jQuery and jQuery UI and is written in JavaScript. A security vulnerability exists in Studio 42 elFinder 2.0.4 that allows remote malicious users to upload arbitrary files and execute PHP code...

File Manager Unauthorized Access

The vulnerability of the File Manager in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...

Roxy File Manager 1.4.5 PHP File Upload Restriction Bypass Exploit

Roxy File Manager version 1.4.5 proof of concept exploit for a PHP file upload restriction bypass vulnerability. Exploit Title: Roxy File Manager 1.4.5 PHP File Upload Restriction Bypass Exploit Author: Adam Shebani NULLHE4D Software: Roxy File Manager Version: 1.4.5 CVE: CVE-2018-20525 Vendor...