CVE-2024-5673
Cross-Site Scripting in PHP File Manager by Dulldusk
Résumé
Cross-Site Scripting in PHP File Manager by Dulldusk
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Vulnerability in Dulldusk's PHP File Manager affecting version 1.7.8. This vulnerability consists of an XSS through the fm_current_dir parameter of index.php. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session.
Références
- advisory github.com
- advisory nvd.nist.gov
- web incibe.es