CVE

Id
27912  
CVE No.
CVE-2007-4555  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to create a new admin account.  
Phase
Assigned (20070827)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
287923 27912 CVE-2007-4555 FULLDISC:20070823 Ipswitch FTP XSS leads to FTP server compromise  View
287924 27912 CVE-2007-4555 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065441.html  View
287925 27912 CVE-2007-4555 OSVDB:37961  View
287926 27912 CVE-2007-4555 URL:http://osvdb.org/37961  View
287927 27912 CVE-2007-4555 SECUNIA:26529  View
287928 27912 CVE-2007-4555 URL:http://secunia.com/advisories/26529  View
287929 27912 CVE-2007-4555 SREASON:3068  View
287930 27912 CVE-2007-4555 URL:http://securityreason.com/securityalert/3068  View
287931 27912 CVE-2007-4555 XF:ipswitch-wsftp-ftpcommand-xss(36237)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55645 JVNDB-2007-004337 Novell GroupWise WebAccess の webacc サーブレットにおけるクロスサイトスクリプティングの脆弱性 Novell GroupWise WebAccess の webacc サーブレットには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-4557 27912 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004337.html  View