CVE-2007-6232: XSS
Published Dec 4, 2007
·Updated
Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action.
Affected Software
9 affected components
HP HP-UX
HP Tru64
IBM AIX
Linux Linux kernel
Santa Cruz Operation Sco Unix=any_version
SGI IRIX=any_version
Sun Solaris
Windriver Bsdos=any_version
FTP Admin=0.1.0
Event History
Dec 4, 2007
CVE Published
06:46 PM
Data Sourced
06:46 PM
DescriptionWeaknessAffected Software
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6232?
CVE-2007-6232 is classified as a high severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2007-6232?
To fix CVE-2007-6232, you should upgrade to a version of FTP Admin newer than 0.1.0 that addresses the XSS vulnerability.
3
What systems are affected by CVE-2007-6232?
CVE-2007-6232 specifically affects FTP Admin version 0.1.0.
4
What type of vulnerability is CVE-2007-6232?
CVE-2007-6232 is a cross-site scripting (XSS) vulnerability allowing attackers to inject scripts via the error parameter.
5
Who is at risk from CVE-2007-6232?
Users running FTP Admin version 0.1.0 are at risk from CVE-2007-6232 due to the injection vulnerability.