CVE-2017-8297
CriticalSummary
A path traversal vulnerability exists in simple-file-manager before 2017-04-26, affecting index.php (the sole 'Simple PHP File Manager' component).
Risk Assessment
This vulnerability may allow attackers to access system files, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update simple-file-manager to a version after 2017-04-26 to mitigate this vulnerability.
Other vulnerabilities in index.php
See all- CVE-2023-41364Critical
In versions of tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.
- CVE-2023-4112Medium
A vulnerability was found in PHP Jabbers Shuttle Booking Software version 1.0 that leads to cross-site scripting (XSS) attacks through manipulation of the /index.php file. The attack can be initiated remotely.
- CVE-2023-3685Low
A vulnerability was found in Nesote Inout Search Engine AI Edition 1.1 related to the manipulation of the 'page' argument in the /index.php file, leading to cross-site scripting attacks.
Original NVD description (English source)
A path traversal vulnerability exists in simple-file-manager before 2017-04-26, affecting index.php (the sole "Simple PHP File Manager" component).