CVE-2023-3784

A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument search/order/download/mode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235051.

• CWE-79

• https://seclists.org/fulldisclosure/2023/Jul/37Exploit, Mailing List, Third Party Advisory
• https://vuldb.com/?ctiid.235051Third Party Advisory
• https://vuldb.com/?id.235051Third Party Advisory
• https://www.vulnerability-lab.com/get_content.php?id=2317Exploit, Third Party Advisory
• https://seclists.org/fulldisclosure/2023/Jul/37Exploit, Mailing List, Third Party Advisory
• https://vuldb.com/?ctiid.235051Third Party Advisory
• https://vuldb.com/?id.235051Third Party Advisory
• https://www.vulnerability-lab.com/get_content.php?id=2317Exploit, Third Party Advisory

Published

Jul 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37832A lack of rate limiting in Elenos ETG150 FM transmitter v3.1…7.5
• CVE-2023-37833Improper access control in Elenos ETG150 FM transmitter v3.1…2.7
• CVE-2023-37835Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE…
• CVE-2023-37836libjpeg commit db33a6e was discovered to contain a reachable…6.5
• CVE-2023-37837libjpeg commit db33a6e was discovered to contain a heap buff…6.5
• CVE-2023-37839An arbitrary file upload vulnerability in /dede/file_manage_…9.8
• CVE-2023-37847novel-plus v3.6.2 was discovered to contain a SQL injection …9.8
• CVE-2023-37849A DLL hijacking vulnerability in Panda Security VPN for Wind…6.5
• CVE-2023-3785A vulnerability was found in PaulPrinting CMS 2018. It has b…5.4
• CVE-2023-37850Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-37855In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…4.3
• CVE-2023-37856In PHOENIX CONTACTs WP 6xxx series web panels in versions pr…4.3