Vulnerabilities

TI-2006-01993 CVE-2006-2048 · GHSA-7pv6-xf67-mqp3

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) port, (2) server, and (3) user parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02143 Published 2006-04-26 No fix listed

TI-2006-01759 CVE-2006-1813 · GHSA-c5g7-36mf-44mq

Directory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote…

LOW 32

Directory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01759 Published 2006-04-18 No fix listed

TI-2006-01758 CVE-2006-1812 · GHSA-jxwv-475j-75m2

phpWebFTP 3.2 and earlier stores script.js under the web document root with insufficient…

LOW 31

phpWebFTP 3.2 and earlier stores script.js under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01351 Published 2006-04-18 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk…

Directory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote…

phpWebFTP 3.2 and earlier stores script.js under the web document root with insufficient…