CVE-2012-6040

File King Advanced File Management 1.4 - Cross-Site Scripting via Page Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-6040. PoCs published by Am!r.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Advanced File Management 1.4, where user-supplied input is not properly sanitized. The vulnerability allows arbitrary script execution in the context of the affected site.

Description

Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Am!r · textwebappsphp
https://www.exploit-db.com/exploits/36539

The provided text describes a cross-site scripting (XSS) vulnerability in Advanced File Management 1.4, where user-supplied input is not properly sanitized. The vulnerability allows arbitrary script execution in the context of the affected site.

Classification
Writeup 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Theoretical
Target: Advanced File Management 1.4
No auth needed
Prerequisites: Access to the vulnerable endpoint · User interaction to trigger the XSS payload
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/72275
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/51339

Scores

EPSS 0.0161
EPSS Percentile 73.1%

Details

CWE
CWE-79
Status published
Products (1)
convergine/file_king_advanced_file_management 1.4
Published Nov 26, 2012
Tracked Since Feb 18, 2026