Dulldusk phpFileManager 1.7.8
Approved changes feed: RSS · Atom
cpe:2.3:a:dulldusk:phpfilemanager:1.7.8:*:*:*:*:*:*:*
part: a version: 1.7.8 update: *
| Vendor | Dulldusk (2b233c42-a231-5c6b-a12a-3e54ba7f6f47) |
|---|---|
| Product | Phpfilemanager (427e928b-0ed5-5628-86fb-5df661335947) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5673 |
vulnerable | 2026-06-08 06:56:16.999086 |
Cross-Site Scripting in PHP File Manager by Dulldusk
MEDIUM (6.1)
Vulnerability in Dulldusk's PHP File Manager affecting version 1.7.8. This vulnerability consists of an XSS through the fm_current_dir parameter of index.php. An attacker could send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session.
Published: 2024-06-06T10:19:34.669Z
Updated: 2024-08-01T21:18:06.988Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25632 |
vulnerable | 2026-06-08 05:13:42.688895 |
phpFileManager 1.7.8 Local File Inclusion via index.php
MEDIUM (6.2)
phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm_current_dir, and filename parameters. Attackers can send GET requests to index.php with crafted parameter values to access sensitive files like /etc/passwd from the server.
Published: 2026-03-24T11:27:06.388Z
Updated: 2026-03-26T12:38:55.082Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.