13 matches found
CVE-2026-15575
Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-15575
SFM Software Technologies Inc. Costifier is affected by a sensitive information disclosure vulnerability caused by active debug code (CWE-489) enabled in a production environment. This flaw allows for the exploitation of non-production interfaces. The vulnerability was identified as of October 16...
CVE-2026-15575 Sensitive Information Disclosure Due to Enabled Debug Mode in Production in SFM Software's Costifier
Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2026-15219
A vulnerability exists in SFM Software Technologies Inc. Costifier involving an Insecure Direct Object Reference (IDOR) . The flaw allows for an authorization bypass through a User-Controlled key vulnerability, specifically enabling the Exploitation of Trusted Identifiers . The issue impacts the ...
CVE-2026-15219 IDOR in SFM Software's Costifier
Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
sfm-nieder-olm.de Cross Site Scripting vulnerability OBB-3656249
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sfm-cosmos.ch Cross Site Scripting vulnerability OBB-3108306
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
sfm-microbiologie.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1179933 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
stuart.training XSS vulnerability
Open Bug Bounty ID: OBB-417556 Description| Value ---|--- Affected Website:| stuart.training Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2003-1539
Cross-site scripting XSS vulnerability in ONEdotOH Simple File Manager SFM before 0.21 allows remote attackers to inject arbitrary web script or HTML via 1 file names and 2 directory names...
CVE-2003-1539
The CVE-2003-1539 entry affects the ONEdotOH Simple File Manager (SFM) CGI (fm.php) prior to version 0.21. The vulnerability arises from improper validation of directory and file names, enabling cross-site scripting (XSS) by an attacker who can supply crafted names. Impact is remote XSS via manip...
CVE-2003-1539: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ONEdotOH Simple File Manager SFM before 0.21 allows remote attackers to inject arbitrary web script or HTML via 1 file names and 2 directory names...
CVE-2006-6376
The CVE-2006-6376 entry refers to multiple directory traversal vulnerabilities in Simple File Manager (SFM) 0.24a, specifically in the fm.php component. The underlying issue allows an attacker to manipulate .. directory traversals to (1) read arbitrary files via the filename parameter in a downlo...