CVE-2026-37069: Exposure of Sensitive Information to an Unauthorized Actor

Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know in which system directory the application code is running by sending a GET request to the endpoint...

CVE-2019-12507

An XSS vulnerability exists in PHPRelativePath aka Relative Path through 1.0.2 via the RelativePath.Example1.php path parameter...

CVE-2019-12507

An XSS vulnerability exists in PHPRelativePath aka Relative Path through 1.0.2 via the RelativePath.Example1.php path parameter...

PT-2019-12835

Name of the Vulnerable Software and Affected Versions PHPRelativePath versions through 1.0.2 Description An issue exists where an XSS vulnerability is present, allowing potential exploitation. The vulnerability is related to the RelativePath.Example1.php path parameter. Recommendations For versio...

CVE-2019-12507: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability exists in PHPRelativePath aka Relative Path through 1.0.2 via the RelativePath.Example1.php path parameter...