GleamTech FileUltimate Cross-site Scripting

The FileExplorer component in GleamTech FileUltimate 6.1.5 allows XSS via an SVG document...

CVE-2020-15015

The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document...

CVE-2020-15015

The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document...

CVE-2020-15015

The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document...

CVE-2020-15015

The CVE-2020-15015 entry concerns GleamTech FileUltimate 6.1.5.0, specifically the FileExplorer component. It states an XSS vulnerability that can be triggered via an SVG document. The available connected documents corroborate the component and version (6.1.5.0) and the SVG-based XSS issue, but d...

CVE-2020-15015

The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document...

CVE-2020-15015: Improper Neutralization of Input During Web Page Generation

The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document...

PT-2020-14120

Name of the Vulnerable Software and Affected Versions GleamTech FileUltimate version 6.1.5.0 GleamTech FileUltimate version 6.1.5 Description The issue concerns the FileExplorer component, which is susceptible to XSS attacks when handling SVG documents. Recommendations For version 6.1.5.0, update...

CVE-2017-9602

KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to...

CVE-2017-9602

KBVault Mysql Free Knowledge Base application package 0.16a is affected by an arbitrary file upload vulnerability. The issue arises in the FileExplorer/Explorer.aspx component (id=/Uploads) which allows unauthenticated access to upload and delete functions. An attacker can upload an ASPX script t...

CVE-2017-9602: Incorrect Permission Assignment for Critical Resource

KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to...