CVE-2006-3179

The CVE describes a Cross-site Scripting (XSS) vulnerability in the Confixx Pro line (3.0 and earlier) affecting tools_ftp_pwaendern.php, exploitable via the account parameter. The underlying issue is improper handling of input in that parameter, enabling injection of arbitrary web script/HTML. A...

CVE-2005-1302

The CVE-2005-1302 issue affects Confixx 3.08 and earlier, where a SQL injection vulnerability exists in the change user field. The underlying cause is improper handling of user-supplied input in the affected code path, allowing remote attackers to execute arbitrary SQL commands. The available doc...

CVE-2006-1759

CVE-2006-1759 describes a Cross-site Scripting (XSS) vulnerability in SWSoft Confixx 3.1.2, specifically in the file allgemein_transfer.php . The issue arises through the jahr parameter, enabling remote attackers to inject arbitrary web script or HTML. The entry notes the vulnerability as applica...

CVE-2006-3180

CVE-2006-3180 is a cross-site scripting (XSS) vulnerability in the Confixx Pro 3.0 product, specifically in ftp_index.php, exploitable through the path parameter. The NVD entry lists a CVSSv2 base score of 6.8 (MEDIUM) with network access, requiring no authentication, and impacting confidentialit...

CVE-2006-1754

CVE-2006-1754 affects SWSoft Confixx versions 3.0.6, 3.0.8, and 3.1.2. The vulnerability is a SQL injection in index.php that allows remote attackers to execute arbitrary SQL commands via the SID parameter. The connection documents confirm the affected product/version and the injection mechanism,...

CVE-2006-2423

The CVE-2006-2423 entry concerns a Cross-site Scripting (XSS) vulnerability in ftplogin/index.php of Confixx 3.1.2. The vulnerability arises from unvalidated input in the login parameter, allowing remote attackers to inject arbitrary web script or HTML. Affected component: Confixx 3.1.2, specific...