Lucene search
+L

5 matches found

Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•10 views

PT-2026-67787

Name of the Vulnerable Software and Affected Versions Trippo ResponsiveFilemanager versions prior to 9.14.1 Description A remote flaw exists in an unknown function within the filemanager/dialog.php file. This issue allows for unrestricted upload of files to the server. Recommendations At the...

7.5CVSS7.1AI score0.005EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/04 12:00 a.m.•10 views

CVE-2026-18788: Unrestricted Upload of File with Dangerous Type

A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is an unknown function of the file filemanager/dialog.php. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public a...

7.5CVSS6.6AI score0.005EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2015/01/29 12:00 a.m.•5 views

PT-2015-5276

Name of the Vulnerable Software and Affected Versions Gecko CMS versions 2.2 through 2.3 Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters in admin/index.php and js/editor/plugins/filemanager/dialog.php. The vulnerable parameters include...

4.3CVSS0.04076EPSS
SaveExploits2References9
Mend
Mend
•added 2015/01/08 8:00 p.m.•10 views

CVE-2014-9582

Cross-site scripting XSS vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to inject arbitrary web script or HTML via the shortname parameter in a rename action. NOTE: this issue was originally incorrectly mapped to CVE-2014-1137; see CVE-2014-1137 for mor...

6.3CVSS0.01474EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/08 12:00 a.m.•14 views

CVE-2014-9582: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to inject arbitrary web script or HTML via the shortname parameter in a rename action. NOTE: this issue was originally incorrectly mapped to CVE-2014-1137; see CVE-2014-1137 for mor...

4.3CVSS6AI score0.01474EPSS
SaveExploits2References2
Rows per page
Query Builder