CVE-2012-6040

Convergine File King Advanced File Management - XSS

Title source: rule
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Am!r · textwebappsphp
https://www.exploit-db.com/exploits/36539

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/72275
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/51339

Scores

EPSS 0.0064
EPSS Percentile 70.8%

Details

CWE
CWE-79
Status published
Products (1)
convergine/file_king_advanced_file_management 1.4
Published Nov 26, 2012
Tracked Since Feb 18, 2026