CVE-2019-19738 | BDVDB-2026-128388 Detail

Description#

log_file_viewer.php in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the lFile parameter on the page, which would allow an attacker to input HTML or execute scripts on the site, aka XSS.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://medium.com/%40jra8908/yetishare-3-5-2-4-5-3-multiple-vulnerabilities-2d01d0cd7459
https://github.com/jra89/CVE-2019-19738

Exploit#

No public exploit known

History#

Version 12019-12-30Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.