Filtered by vendor Onedotoh Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2006-6376 1 Onedotoh 1 Simple File Manager 2024-11-21 N/A
Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow remote attackers to use ".." sequences to (1) read arbitrary files via the filename parameter in a download action, (2) delete arbitrary files via the delete parameter, and (3) modify arbitrary files via the edit parameter, which can be leveraged to execute arbitrary code.
CVE-2006-3160 1 Onedotoh 1 Simple File Manager 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
CVE-2003-1539 1 Onedotoh 1 Simple File Manager 2024-11-20 N/A
Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to inject arbitrary web script or HTML via (1) file names and (2) directory names.