Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2687▼ 562 respecto a la semana anterior

Críticas / altas1259▼ 239 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)265▼ 239 respecto a la semana anterior

187 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2008-4319	Modificada	Media (6.4)	2.3%	💥 Exploit	Libra File Manager PHP Filemanager	29/9/2008	16/6/2026	fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and earlier allows remote attackers to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters in the query string.
CVE-2008-3504	Modificada	Alta (7.5)	1.1%	—	Mpfm Mask PHP File Manager	6/8/2008	16/6/2026	Unspecified vulnerability in mask PHP File Manager (mPFM) before 2.3 has unknown impact and remote attack vectors related to "manipulation of cookies."
CVE-2007-6281	Modificada	Alta (10)	6.6%	—	Stbernard Open File Manager	20/12/2007	16/6/2026	Heap-based buffer overflow in Open File Manager service (ofmnt.exe) in St. Bernard Open File Manager 9.5 allows remote attackers to execute arbitrary code via a long request.
CVE-2006-6376	Modificada	Alta (7.5)	4.2%	💥 Exploit	Onedotoh Simple File Manager	7/12/2006	16/6/2026	Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow remote attackers to use ".." sequences to (1) read arbitrary files via the filename parameter in a download action, (2) delete arbitrary files via the delete parameter, and (3) modify arbitrary files via the edit parameter,…
CVE-2006-4077	Modificada	Alta (7.5)	3.2%	💥 Exploit	Comet Webfile Manager	11/8/2006	16/6/2026	PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager (CWFM) 0.9.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the Language parameter.
CVE-2006-3160	Modificada	Baja (2.6)	1.3%	—	Onedotoh Simple File Manager	22/6/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
CVE-2005-1602	Modificada	Alta (7.5)	1.7%	—	Net56 File Manager	16/5/2005	16/6/2026	SQL injection vulnerability in login.asp for Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field.
CVE-2005-1603	Modificada	Media (5)	3.1%	💥 Exploit	Niteenterprises Remote File Manager	16/5/2005	16/6/2026	NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service (crash) via a crafted string to TCP port 7080.
CVE-2003-1539	Modificada	Media (4.3)	1.1%	—	Onedotoh Simple File Manager	31/12/2003	16/6/2026	Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to inject arbitrary web script or HTML via (1) file names and (2) directory names.
CVE-2002-1926	Modificada	Media (5)	1.7%	—	Aquonics Scripting Aquonics File Manager	31/12/2002	16/6/2026	Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string.
CVE-2002-1927	Modificada	Baja (2.1)	0.30%	—	Aquonics Scripting Aquonics File Manager	31/12/2002	16/6/2026	Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file.
CVE-2002-1815	Modificada	Media (5)	1.7%	—	Aquonics Scripting Aquonics File Manager	31/12/2002	16/6/2026	Directory traversal vulnerability in source.php and source.cgi in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.