← Database

CVE-2006-3160

LOW CVSS: 2.6 Published: 2006-06-22 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

Affected Platforms

Onedotoh Simple File Manager

Weakness Type

NVD-CWE-Other

References