Facilemanager

Facilemanager

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-24571

Exploit
  • EPSS 0.36%
  • Veröffentlicht 31.01.2024 23:15:08
  • Zuletzt bearbeitet 21.11.2024 08:59:26

facileManager is a modular suite of web apps built with the sysadmin in mind. For the facileManager web application versions 4.5.0 and earlier, we have found that XSS was present in almost all of the input fields as there is insufficient input valida...

6.5

CVE-2024-24572

Exploit
  • EPSS 0.29%
  • Veröffentlicht 31.01.2024 23:15:08
  • Zuletzt bearbeitet 21.11.2024 08:59:26

facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, the $_REQUEST global array was unsafely called inside an extract() function in admin-logs.php. The PHP file fm-init.php prevents arbitrary ma...

8.8

CVE-2024-24573

Exploit
  • EPSS 0.52%
  • Veröffentlicht 31.01.2024 23:15:08
  • Zuletzt bearbeitet 21.11.2024 08:59:27

facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, when a user updates their profile, a POST request containing user information is sent to the endpoint server/fm-modules/facileManager/ajax/pr...