Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the session variable $_SESSION['RF']["view_type"] wasn't sanitized if it was already set. This made stored XSS possible if one opens ajax_calls.php and uses the "view" action and places a payload in the type parameter, and then returns to the dialog.php page. This occurs because ajax_calls.php was also able to set the $_SESSION['RF']["view_type"] variable, but there it wasn't sanitized.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tecrail Responsive FileManager 跨站脚本漏洞
Vulnerability Description
Tecrail Responsive FileManager是意大利Tecrail公司的一款使用PHP语言编写的开源文件管理器。该产品支持视频、图像或其他文件的上传和管理。 Tecrail Responsive FileManager 9.14.0及之前版本中的dialog.php页面存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
CVSS Information
N/A
Vulnerability Type
N/A