CVE-2024-26566

CVE-2024-26566 affects Cute Http File Server v3.1. The issue allows a remote attacker to escalate privileges via the password verification component, with a network attack vector, no user interaction, and high impact (Integrity). Affected software is Cute Http File Server v3.1 (no other versions ...

CVE-2023-4118

CVE-2023-4118 affects Cute Http File Server 2.0, specifically the Search component, where a cross-site scripting vulnerability can be triggered remotely. Multiple connected sources corroborate that the vulnerability allows remote initiation and that the public disclosure of the exploit has occurr...

CVE-2023-50639

CVE-2023-50639 : A cross-site scripting (XSS) vulnerability exists in CuteHttpFileServer (CHFS) versions 1.0 and 2.0, originating from the file upload feature on the homepage. Exploitation could allow an attacker to obtain sensitive information via the uploaded file handling. Public sources consi...