PT-2003-2484 · Onedotoh · Onedotoh Simple File Manager

Simos Xenitellis · Publicado 2003-12-31 · Atualizado 2008-09-05 · CVE-2003-1539

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ONEdotOH Simple File Manager (SFM) versions prior to 0.21

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via file names and directory names.

Recommendations For versions prior to 0.21, update to version 0.21 or later to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2003-1539

Produtos afetados

Onedotoh Simple File Manager

Referências · 5

• 🔥 http://sourceforge.net/tracker/index.php?func=detail&aid=695597&group_id=60333&atid=493842 · Exploit
• http://secunia.com/advisories/8257 · Aviso do Fabricante
• http://securityfocus.com/bid/7035 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2003-1539 · Nota de Segurança
• http://sourceforge.net/project/shownotes.php?release_id=144274 · Nota