Unscored CVE-2006-3160 EUVD-2006-3157GHSA-6jpr-6hcp-5248

Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to injec…

Published Jun 22, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

References

20060618 onedotoh xss atack mailing-list
ADV-2006-2435 vdb-entry
18534 vdb-entry
26665 vdb-entry
onedotoh-fmindex-xss(27306) vdb-entry
20668 third-party-advisory