Jirafeau Cross-Site Scripting Vulnerability

Jirafeau is a file sharing website system. A cross-site scripting vulnerability exists in the 'search file by hash' form in Jirafeau versions prior to 3.4.1. A remote attacker can exploit this vulnerability to steal sessions and gain administrative privileges...

Jirafeau Cross-Site Request Forgery Vulnerability

Jirafeau is a file sharing website system. A cross-site request forgery vulnerability exists in the administration panel in Jirafeau versions prior to 3.4.1. A remote attacker can exploit this vulnerability to force an administrator to perform a file lookup operation and perform a cross-site...

PT-2018-10507

Name of the Vulnerable Software and Affected Versions Jirafeau versions prior to 3.4.1 Description The administration panel is susceptible to three CSRF attacks on search functionalities, specifically search by name, search by hash, and search link. Recommendations For versions prior to 3.4.1,...