CVE-2006-2048

2006-04-2620:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) port, (2) server, and (3) user parameters. NOTE: it is possible that the affected version is actually 3.2.

References

secunia.com/advisories/19827

securityreason.com/securityalert/786

www.osvdb.org/24975

www.securityfocus.com/archive/1/431985/100/0/threaded

www.securityfocus.com/bid/17688

www.subjectzero.net/research/phpwebftpxss.htm

www.vupen.com/english/advisories/2006/1530

exchange.xforce.ibmcloud.com/vulnerabilities/26067