XSS in Netwin Surgeftp
CVE-2010-1068
Multiple cross-site scripting (XSS) vulnerabilities in surgeftpmgr.cgi in NetWin SurgeFTP 2.3a6 allow remote attackers to inject arbitrary web script or HTML via the (1) domainid or (2) classid parameter in a class action.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (52.3th percentile) — read the EPSS interpretation.
Affected products
- Netwin Surgeftp — versions 2.3a6
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- 38097 (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- 11092 (Exploit, exploit, x_refsource_EXPLOIT-DB)
- surgeftp-surgeftpmgr-xss(55509) (vdb-entry, x_refsource_XF)