Phpwebftp

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Phpwebftp records in CISA KEV

No Phpwebftp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpwebftp 3 records LOW

Records

3 records

TI-2006-01759 CVE-2006-1813 · GHSA-c5g7-36mf-44mq

Directory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote…

LOW 32

Directory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01759 Published 2006-04-18 No fix listed

TI-2006-01758 CVE-2006-1812 · GHSA-jxwv-475j-75m2

phpWebFTP 3.2 and earlier stores script.js under the web document root with insufficient…

LOW 31

phpWebFTP 3.2 and earlier stores script.js under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01351 Published 2006-04-18 No fix listed

TI-2006-01993 CVE-2006-2048 · GHSA-7pv6-xf67-mqp3

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) port, (2) server, and (3) user parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02143 Published 2006-04-26 No fix listed

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0