⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-3988

MEDIUM · 4.3 CVSS Gepubliceerd: 03-12-2014 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in index.php in SunHater KCFinder 3.11 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) file or (2) directory (folder) name of an uploaded file.

Vendors

Sunhater

Affected products

Kcfinder

References

github.com