Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2022-42147

Disclosure Date: October 17, 2022 (last updated October 08, 2023)
kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.
Attacker Value
Unknown

CVE-2022-42149

Disclosure Date: October 17, 2022 (last updated October 08, 2023)
kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.
Attacker Value
Unknown

CVE-2022-36593

Disclosure Date: September 02, 2022 (last updated October 08, 2023)
kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java.
Attacker Value
Unknown

CVE-2022-29349

Disclosure Date: May 25, 2022 (last updated October 07, 2023)
kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.
Attacker Value
Unknown

CVE-2021-43734

Disclosure Date: February 15, 2022 (last updated October 07, 2023)
kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host.