Skrol29/tbszip
GitHub
Releases2
Frequency2 years 1 month
Last Release
Stars6
TbsZip is a simple PHP class that helps to work with zip archives. You can create a new archive, or virtually read and modify an existing one. It needs no exe file and makes no temporary files.
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 6.1 MEDIUM | — | ||
A reflected Cross-Site Scripting (XSS) vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary web script or HTML via a crafted payload in a filename parameter (e.g., to the FileRead function). This occurs because the error message is not properly sanitized before being output to the user. This vulnerability is fixed in version 2.18. | |||