GCVE - cpe:2.3:a:onedotoh:simple_file

Approved changes feed: RSS · Atom

cpe:2.3:a:onedotoh:simple_file_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Onedotoh (`bfd09185-dbe6-5ea2-abfc-56e815e31e1f`)
Product	Simple File Manager (`d762f603-05c3-565d-9cd9-4cebaff4b7f2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:sourceforge/onedotoh`	purl2cpe	2026-06-01 10:16:12.725062

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-3160`	vulnerable	2026-06-08 04:49:08.473626	Details available Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Published: 2006-06-22T22:00:00.000Z Updated: 2024-08-07T18:16:05.948Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/437671/100/100/threaded http://www.vupen.com/english/advisories/2006/2435 http://www.securityfocus.com/bid/18534 http://www.osvdb.org/26665 https://exchange.xforce.ibmcloud.com/vulnerabilities/27306	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1539`	vulnerable	2026-06-08 04:47:47.866565	Details available Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to inject arbitrary web script or HTML via (1) file names and (2) directory names. Published: 2008-01-10T01:00:00.000Z Updated: 2024-09-17T02:16:57.560Z Open on db.gcve.eu Reference links http://sourceforge.net/project/shownotes.php?release_id=144274 http://www.securityfocus.com/bid/7035 http://secunia.com/advisories/8257 http://sourceforge.net/tracker/index.php?func=detail&aid=695597&group_id=60333&atid=493842	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.