Advisories · Technology
File Manager.
Every CVE that names File Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass
- File Manager
- FileOrganizer
- Cross-site scripting (XSS)
- CVSS 5.9 Medium
File Manager 7.2.2 - 8.0.4 - Unauthenticated Database Backup Disclosure
- File Manager
- Information disclosure
- CVSS 7.5 High
Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector
- File Manager
- Information disclosure
- CVSS 7.5 High
Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure
- File Manager
- Information disclosure
- CVSS 8.8 High
Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch
- File Manager
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Multiple elFinder Plugins - Authenticated OS Command Injection
- FileOrganizer
- Advanced File Manager
- CVSS 6.5 Medium
File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal
- File Manager
-
WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS)
- File Manager
- Cross-site scripting (XSS)