File Thingie 安全漏洞

File Thingie is a file manager developed by Frances Leese. Version 2.5.7 of File Thingie has a security vulnerability, which stems from improper handling of the dir parameter in GET requests, potentially leading to cross-site scripting attacks...

PT-2020-19931

Name of the Vulnerable Software and Affected Versions Gollem versions prior to 3.0.13 Description The issue is related to a reflected Cross-Site Scripting XSS vulnerability. It occurs via the HTTP GET dir parameter in the browser functionality, affecting breadcrumb output. An attacker can exploit...