Elements-IT HTTP Commander 跨站脚本漏洞

Elements-IT HTTP Commander is a server-hosted, web-based file management solution from Elements-IT Germany. It provides basic functionality for working with files creating, copying, deleting, etc. and many other additional features, such as integration with cloud services, online editing of Offic...

CVE-2021-33212: Improper Neutralization of Input During Web Page Generation

A Cross-site scripting XSS vulnerability in the "View in Browser" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SVG image...

PT-2021-20083

Name of the Vulnerable Software and Affected Versions Elements-IT HTTP Commander version 5.3.3 Description A vulnerability in the "Upload from URL" feature allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address...

CVE-2021-33213: Server-Side Request Forgery (SSRF)

An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address...

CVE-2021-33211: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to write files to arbitrary directories via relative paths in ZIP archives...

PT-2021-20081

Name of the Vulnerable Software and Affected Versions Elements-IT HTTP Commander version 5.3.3 Description A Directory Traversal issue in the Unzip feature allows remote authenticated users to write files to arbitrary directories via relative paths in ZIP archives. Recommendations For Elements-IT...