Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown
CVE-2022-24573
Disclosure Date: March 03, 2022 (last updated February 23, 2025)
A stored cross-site scripting (XSS) vulnerability in the admin interface in Element-IT HTTP Commander 7.0.0 allows unauthenticated users to get admin access by injecting a malicious script in the User-Agent field.
0
Attacker Value
Unknown
CVE-2021-40813
Disclosure Date: January 13, 2022 (last updated February 23, 2025)
A cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated users to inject arbitrary web script or HTML via filenames.
0
Attacker Value
Unknown
CVE-2021-33212
Disclosure Date: July 14, 2021 (last updated February 23, 2025)
A Cross-site scripting (XSS) vulnerability in the "View in Browser" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SVG image.
0
Attacker Value
Unknown
CVE-2021-33211
Disclosure Date: July 14, 2021 (last updated February 23, 2025)
A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to write files to arbitrary directories via relative paths in ZIP archives.
0
Attacker Value
Unknown
CVE-2021-33213
Disclosure Date: July 14, 2021 (last updated February 23, 2025)
An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address.
0
Attacker Value
Unknown
CVE-2007-0583
Disclosure Date: January 30, 2007 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) LogoffMessage parameter to logofflast.aspx or the (2) txtUsername parameter to Default.aspx. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2003-1166
Disclosure Date: December 31, 2003 (last updated February 22, 2025)
Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers to view arbitrary files via a .. (dot dot) in the file parameter.
0
