CVE-2007-6232 Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action.
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ftp admin | = 0.1.0 | No fix listed |
References
- 27875 third-party-advisory vendor-advisory
- ftp-admin-index-xss(38780) vdb-entry
- 4681 exploit