NetSight
IP …
medium6.1Public exploit code

CVE-2019-12905

FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman&section=do&page=up URI.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

FileRun 2019.05.21 allows XSS via the filename to the ?module=fileman&section=do&page=up URI. This issue has been fixed in FileRun 2019.06.01.

Affected products

VendorProductAffected versions
AfianFilerun
from 2019.05.21 before 2019.06.01

Weakness classification

CWE-79

References