16 matches found
CVE-2021-33497
Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files...
Cross-site Scripting (XSS)
github.com/dutchcoders/transfer.sh is vulnerable to cross-site scriptingXSS attacks. The library is unable to determine the content type of the file inserted through ContentType metadata, which allows an attacker to inject and execute malicious javascript on victim's browser...
GHSA-PWQ7-F7F9-CM2J Dutchoders transfer.sh contains an XSS vulnerability via malicious file upload
dutchcoders Transfer.sh versions 1.4.0 and prior are vulnerable to Cross Site Scripting XSS via a malicious document uploaded in transfer.sh. There is a fix commit merged into main for this issue, but an updated version has not yet been released...
CVE-2022-40931
dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting XSS...
CVE-2022-40931
dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting XSS...
Cross site scripting
dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting XSS...
CVE-2022-40931
dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting XSS...
Path Traversal in Dutchcoders transfer.sh
Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files...
Cross-site scripting in Dutchcoders transfer.sh
Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view...
CVE-2021-33496
Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view...
CVE-2021-33497
Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files...
CVE-2021-33497
Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files...
CVE-2021-33496
Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view...
Directory traversal
Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files...
Cross site scripting
Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view...
CVE-2021-33496
Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view...