PT-2026-5114 · Unknown · Pdw File Browser

David Bimmel · Publicado 2026-01-28 · Atualizado 2026-01-28 · CVE-2020-36988

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PDW File Browser versions 1.3 and earlier

Description PDW File Browser versions 1.3 and earlier are susceptible to stored and reflected cross-site scripting issues. Authenticated attackers can inject malicious scripts through file rename and path parameters. Attackers can create malicious URLs or rename files containing XSS payloads to execute arbitrary JavaScript in the browsers of users accessing the file browser. The vulnerable parameters include file rename and path parameters.

Recommendations Versions prior to 1.3 are vulnerable. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2020-36988

Produtos afetados

Pdw File Browser

Referências · 6

• 🔥 https://exploit-db.com/exploits/48947 · Exploit
• ❌ https://github.com/GuidoNeele/PDW-File-Browser · Nota, Deleted
• https://vulncheck.com/advisories/pdw-file-browser-cross-site-scripting-xss · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-36988 · Nota de Segurança
• https://t.me/CVEtracker/43145 · Publicação no Telegram
• https://t.me/cveNotify/150131 · Publicação no Telegram