CVE-2020-15015

The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document...

dhtmlx FileExplorer security vulnerabilities

dhtmlx FileExplorer is a JavaScript file system from dhtmlx, Inc. A security vulnerability exists in dhtmlx FileExplorer version v.8.4.6, which originated from a directory traversal vulnerability that allows remote attackers to obtain sensitive information via the file listing feature...

dhtmlx FileExplorer security vulnerabilities

dhtmlx FileExplorer is a JavaScript file system from dhtmlx, Inc. A security vulnerability exists in dhtmlx FileExplorer version v.8.4.6, which originated from a local file inclusion vulnerability that allows remote attackers to obtain sensitive information via the file download feature...

GHSA-RRWX-8WM4-QHH4 GleamTech FileUltimate Cross-site Scripting

The FileExplorer component in GleamTech FileUltimate 6.1.5 allows XSS via an SVG document...

GleamTech FileUltimate Cross-site Scripting

The FileExplorer component in GleamTech FileUltimate 6.1.5 allows XSS via an SVG document...

CVE-2020-15015

The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document...

CVE-2020-15015

The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document...

CVE-2020-15015

The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document...

CVE-2020-15015

The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document...

CVE-2020-15015

The CVE-2020-15015 entry concerns GleamTech FileUltimate 6.1.5.0, specifically the FileExplorer component. It states an XSS vulnerability that can be triggered via an SVG document. The available connected documents corroborate the component and version (6.1.5.0) and the SVG-based XSS issue, but d...

CVE-2020-15015: Improper Neutralization of Input During Web Page Generation

The FileExplorer component in GleamTech FileUltimate 6.1.5.0 allows XSS via an SVG document...

PT-2020-14120

Name of the Vulnerable Software and Affected Versions GleamTech FileUltimate version 6.1.5.0 GleamTech FileUltimate version 6.1.5 Description The issue concerns the FileExplorer component, which is susceptible to XSS attacks when handling SVG documents. Recommendations For version 6.1.5.0, update...

CVE-2017-9602

KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to...

CVE-2017-9602

KBVault Mysql Free Knowledge Base application package 0.16a is affected by an arbitrary file upload vulnerability. The issue arises in the FileExplorer/Explorer.aspx component (id=/Uploads) which allows unauthenticated access to upload and delete functions. An attacker can upload an ASPX script t...

CVE-2017-9602: Incorrect Permission Assignment for Critical Resource

KBVault Mysql Free Knowledge Base application package 0.16a comes with a FileExplorer/Explorer.aspx?id=/Uploads file-management component. An unauthenticated user can access the file upload and deletion functionality. Through this functionality, a user can upload an ASPX script to...

PT-2017-19062

Name of the Vulnerable Software and Affected Versions KBVault Mysql Free Knowledge Base application package version 0.16a Description The issue allows an unauthenticated user to access file upload and deletion functionality through the FileExplorer/Explorer.aspx component. This can be exploited t...