Skip to content

CVE-2012-6040

Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4...

4.3 MediumPublic exploit

CVE-2012-6040 is a medium vulnerability (CVSS 4.3) in Convergine File King Advanced File Management, published November 26, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.61%, the 75th percentile. No source names a fixed version.

Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Exploit likelihood

1.61%Down 0.3 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Record: CVE-2012-6040
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Record: CVE-2012-6040
Updated: 2026-11-02

EUVDEUVD-2012-5914 No score

Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Record: EUVD-2012-5914
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vf6x-wgx6-9fxg No score

Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4...

Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

Record: GHSA-vf6x-wgx6-9fxg
Weakness: CWE-79
Updated: 2026-11-02

Affected products

convergine file king advanced file management

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Advanced File Management 1.4 - 'users.php' Cross-Site Scripting	2012-01-09

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References