Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mfscripts vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2019-20062
MFScripts YetiShare v3.5.2 through v4.5.4 might allow an malicious user to reset a password by using a leaked hash (the hash never expires until used).
Mfscripts Yetishare
4.3
CVSSv2
CVE-2019-19738
log_file_viewer.php in MFScripts YetiShare 3.5.2 up to and including 4.5.3 does not sanitize or encode the output from the lFile parameter on the page, which would allow an malicious user to input HTML or execute scripts on the site, aka XSS.
Mfscripts Yetishare
4.3
CVSSv2
CVE-2019-19733
_get_all_file_server_paths.ajax.php (aka get_all_file_server_paths.ajax.php) in MFScripts YetiShare 3.5.2 up to and including 4.5.3 does not sanitize or encode the output from the fileIds parameter on the page, which would allow an malicious user to input HTML or execute scripts ...
Mfscripts Yetishare
6.5
CVSSv2
CVE-2019-19734
_account_move_file_in_folder.ajax.php in MFScripts YetiShare 3.5.2 directly inserts values from the fileIds parameter into a SQL string. This allows an malicious user to inject their own SQL and manipulate the query, typically extracting data from the database, aka SQL Injection.
Mfscripts Yetishare
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028
memory leak
log injection
CVE-2024-3400
CVE-2022-48695
CVE-2022-48675
CVE-2024-34487
CVE-2024-33792
spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2