PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para fusiondirectory en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 3
A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png (and .svg or .xpm for some configurations) via the icon parameter of a GET request to geticon.php.
Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /fusiondirectory/index.php?message=[injection], /fusiondirectory/index.php?message=invalidparameter&plug={Injection], /fusiondirectory/index.php?signout=1&message=[injection]&plug=106.
Fusiondirectory 1.3 suffers from Improper Session Handling.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.