CVE-2006-2048

CVE-2006-2048 concerns PHPWebFTP (Edwin van Wijk) version 2.3 with potential 3.2, describing multiple XSS in index.php. The vulnerability allows remote attackers to inject arbitrary web script/HTML via the (1) port, (2) server, and (3) user parameters. NVD metrics show a CVSS v2 base score of 4.3...