Php Directory Listing Script
Approved changes feed: RSS · Atom
cpe:2.3:a:evoluted:php_directory_listing_script:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Evoluted (0210394e-e0d2-5a4e-baf7-b0c52a2c6a13) |
|---|---|
| Product | Php Directory Listing Script (704e310b-2206-5fd7-97f8-fa605ff9daa9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25557 |
vulnerable | 2026-07-29 00:34:57.035420 |
Evoluted PHP Directory Listing Script 4.0.5 Reflected XSS via dir parameter
MEDIUM (5.4)
Evoluted PHP Directory Listing Script through 4.0.5 contains a reflected cross-site scripting vulnerability in index.php where the dir parameter value is reflected without HTML encoding inside the HTML title element and inside anchor href attributes in the breadcrumb navigation. Attackers can inject arbitrary JavaScript via crafted dir parameter values by breaking out of the title context or injecting event handlers into breadcrumb anchor attributes to execute malicious scripts in a victim's browser.
Published: 2026-06-09T20:49:31.853Z
Updated: 2026-06-10T13:44:26.277Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.