Skip to content
OpenAdvisories

Archive

6 February 2025

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 4.8
    CVE-2022-40490 Public exploit

    Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerabi…

  • Medium 5.3
    CVE-2024-53586 Public exploit

    An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a cr…

  • Medium 6.3
    CVE-2024-48589 Public exploit

    Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code v…

  • Medium 4.5
    CVE-2024-57523 Public exploit

    Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attack…

  • Medium 6.1
    CVE-2024-57427 Public exploit

    PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints imprope…

  • Medium 5.4
    CVE-2024-57429 Public exploit

    A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2…