Skip to content
OpenAdvisories

Vendor

WillyXJ

3 known vulnerabilities.

Products

facileManager 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-24572

    facileManager Authenticated Variable Manipulation leading to SQL Injection

    facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, the $_REQUEST global array was unsafely called inside an extract() function in admin-logs.php. The PHP file fm-init.php prevents arbitrary manipulatio…

    WillyXJ facileManager
  • Medium 5.4
    CVE-2024-24571

    facileManager Systemic Cross-Site Scripting (XSS)

    facileManager is a modular suite of web apps built with the sysadmin in mind. For the facileManager web application versions 4.5.0 and earlier, we have found that XSS was present in almost all of the input fields as there is insufficient input validation.

    WillyXJ facileManager