CVE-2012-6040

Convergine File King Advanced File Management - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Am!r · textwebappsphp

https://www.exploit-db.com/exploits/36539

View Code ZIP pw:eip

References (3)

[Exploit] http://packetstormsecurity.org/files/view/108466/afm134-xss.txt

[Exploit] http://www.securityfocus.com/bid/51339

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/72275

Scores

EPSS 0.0064

EPSS Percentile 70.4%

Details

CWE

CWE-79

Status published

Products (2)

convergine/file_king_advanced_file_management

n/a/n/a

Published Nov 26, 2012

Tracked Since Feb 18, 2026