3 matches found
CVE-2026-37069: Exposure of Sensitive Information to an Unauthorized Actor
Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know in which system directory the application code is running by sending a GET request to the endpoint...
5.3CVSS5.8AI score0.00358EPSS
SaveExploits0References2
CVE-2019-12507
An XSS vulnerability exists in PHPRelativePath aka Relative Path through 1.0.2 via the RelativePath.Example1.php path parameter...
6.1CVSS6.1AI score0.0089EPSS
SaveExploits0References1
CVE-2019-12507: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability exists in PHPRelativePath aka Relative Path through 1.0.2 via the RelativePath.Example1.php path parameter...
6.1CVSS5.8AI score0.0089EPSS
SaveExploits0References2
20