CVE-2017-8832

MEDIUM

Allen Disk 1.6 - Cross-Site Scripting via id Parameter in downfile.php

Title source: llm

Allen Disk 1.6 has XSS in the id parameter to downfile.php.

Core 1

Core References

Issue Tracking, Patch, Third Party Advisory x_refsource_confirm

CVSS v3 6.1

EPSS 0.0063

EPSS Percentile 45.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (1)

allen_disk_project/allen_disk 1.6

Published May 08, 2017

Tracked Since Feb 18, 2026