Vulnerabilities

TI-2003-01439 CVE-2003-1539 · GHSA-wq6q-8prg-h8xh

Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before…

LOW 22

Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to inject arbitrary web script or HTML via (1) file names and (2) directory names.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01085 Published 2008-01-10 No fix listed CWE-79

TI-2006-06124 CVE-2006-6376 · GHSA-m592-q63w-rw7x

Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a…

MEDIUM 40

Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow remote attackers to use ".." sequences to (1) read arbitrary files via the filename parameter in a download action, (2) dele…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04176 Published 2006-12-07 No fix listed

TI-2006-03060 CVE-2006-3160 · GHSA-6jpr-6hcp-5248

Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM)…

LOW 16

Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01293 Published 2006-06-22 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before…

Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a…

Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM)…