CVE-2007-4555: XSS
Cross-site scripting (XSS) vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to create a new admin account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4555?
CVE-2007-4555 is considered a medium-severity vulnerability due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2007-4555?
To address CVE-2007-4555, ensure that you update Ipswitch WS_FTP to the latest version that includes patches for this vulnerability.
What systems are affected by CVE-2007-4555?
CVE-2007-4555 affects Ipswitch WS_FTP across all versions.
What type of vulnerability is CVE-2007-4555?
CVE-2007-4555 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
Can CVE-2007-4555 be exploited remotely?
Yes, CVE-2007-4555 can be exploited remotely, allowing attackers to execute malicious scripts in the context of the victim's session.