CNNVD-202507-3012 Information

CNNVD ID

CNNVD-202507-3012

CVE-2025-54296

  • CNNVD Published: 2025-07-23

Description (Chinese)

Files是Karl Ward个人开发者的一个单文件 PHP 应用程序。可以拖放到任何目录中,允许浏览其中的文件和目录。 Files 1.0至1.5.0版本存在跨站脚本漏洞,该漏洞源于容易受到存储型跨站脚本攻击。

Description (English)

Files is a single file PHP application for Karl Ward’s personal developer. You can drag and drop into any directory, and you can browse through its files and directories. Files 1.0 to 1.5.0 have a cross-site script loophole, which stems from their vulnerability to storage-type cross-site script attacks.

Hazard Level

Medium

Vulnerability Type

跨站脚本

Affected Vendor

个人开发者

Published

2025-07-23

Last Modified

2026-02-24

References

https://mooj.org/

Share on: