Show filters
11 Total Results
Displaying 1-10 of 11
Sort by:
Attacker Value
Unknown
CVE-2023-48815
Disclosure Date: December 04, 2023 (last updated December 08, 2023)
kkFileView v4.3.0 is vulnerable to Incorrect Access Control.
0
Attacker Value
Unknown
CVE-2022-46934
Disclosure Date: February 01, 2023 (last updated October 08, 2023)
kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.
0
Attacker Value
Unknown
CVE-2022-4740
Disclosure Date: December 25, 2022 (last updated October 08, 2023)
A vulnerability, which was classified as problematic, has been found in kkFileView. Affected by this issue is the function setWatermarkAttribute of the file /picturesPreview. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216776.
0
Attacker Value
Unknown
CVE-2022-43140
Disclosure Date: November 17, 2022 (last updated December 22, 2024)
kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.controller.OnlinePreviewController#getCorsFile. This vulnerability allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the url parameter.
0
Attacker Value
Unknown
CVE-2022-42147
Disclosure Date: October 17, 2022 (last updated October 08, 2023)
kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.
0
Attacker Value
Unknown
CVE-2022-42149
Disclosure Date: October 17, 2022 (last updated October 08, 2023)
kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.
0
Attacker Value
Unknown
CVE-2022-40879
Disclosure Date: September 29, 2022 (last updated October 08, 2023)
kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'
0
Attacker Value
Unknown
CVE-2022-36593
Disclosure Date: September 02, 2022 (last updated October 08, 2023)
kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java.
0
Attacker Value
Unknown
CVE-2022-35151
Disclosure Date: August 17, 2022 (last updated October 08, 2023)
kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java.
0
Attacker Value
Unknown
CVE-2022-29349
Disclosure Date: May 25, 2022 (last updated October 07, 2023)
kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.
0
