Onedotoh

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Onedotoh records in CISA KEV

No Onedotoh vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simple File Manager 3 records MEDIUM

Records

3 records in Simple File Manager · all components

TI-2006-06124 CVE-2006-6376 · GHSA-m592-q63w-rw7x

Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a…

MEDIUM 40

Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow remote attackers to use ".." sequences to (1) read arbitrary files via the filename parameter in a download action, (2) dele…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04176 Published 2006-12-07 No fix listed

TI-2003-01439 CVE-2003-1539 · GHSA-wq6q-8prg-h8xh

Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before…

LOW 22

Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to inject arbitrary web script or HTML via (1) file names and (2) directory names.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01085 Published 2008-01-10 No fix listed CWE-79

TI-2006-03060 CVE-2006-3160 · GHSA-6jpr-6hcp-5248

Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM)…

LOW 16

Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01293 Published 2006-06-22 No fix listed

Open these records in search →

Critical	0
High	1
Medium	1
Low	1
No CVSS	0