14 matches found
EUVD-2017-7393
Malware in sbrugna...
FileBrowser has an unspecified vulnerability (CNVD-2025-22703)
FileBrowser is an open source web file browser . Provides a file management interface in a specified directory , can be used to upload , delete , preview , rename and edit your files . FileBrowser has a security vulnerability that stems from an improper implementation of password-protected links,...
Authentication Bypass by Primary Weakness
Overview Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness via the password protected links process. An attacker can gain unauthorized access to files by obtaining or discovering direct download links, which may be exposed through browser history, proxy...
Authentication Bypass by Primary Weakness
Overview github.com/filebrowser/filebrowser/v2/http is a web file browser. Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness via the password protected links process. An attacker can gain unauthorized access to files by obtaining or discovering direct...
CVE-2025-52996
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions 2.32.0 and prior, the implementation of password protected links is error-prone, resulting in potential unprotected sharing of a file...
CVE-2025-52996: Authentication Bypass by Primary Weakness
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions 2.32.0 and prior, the implementation of password protected links is error-prone, resulting in potential unprotected sharing of a file...
Protected Links SQL Injection
Username Password...
Expiring Download Links SQL Injection Vulnerability
Protected Links - Expiring Download Links is a download link adding script, through which you can set the number of clicks and the time of existence of the link, etc.. A SQL injection vulnerability exists in Protected Links - Expiring Download Links version 1.0. A remote attacker can inject SQL...
CVE-2017-15977
Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter...
CVE-2017-15977
CVE-2017-15977 affects Protected Links - Expiring Download Links (version 1.0). Provided connected sources confirm a SQL Injection vulnerability enabled by the username parameter. Exploitation materials exist (e.g., Exploit-DB and PacketStorm PoCs), indicating practical risk, but the documents do...
Protected Links - SQL Injection Vulnerability
Exploit for php platform in category web applications Username Password 0day.today 2018-04-02...
PT-2017-14331
Name of the Vulnerable Software and Affected Versions Protected Links - Expiring Download Links version 1.0 Description The issue allows SQL Injection via the username parameter. Recommendations For version 1.0, consider restricting access to the username parameter to minimize the risk of...
CVE-2017-15977: Improper Neutralization of Special Elements used in an SQL Command
Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter...
