Unscored severity · published Nov 10, 2007
CVE-2007-5930
Cross-site scripting (XSS) vulnerability in the web interface in Cerberus FTP Server before 2.46 allows remote attackers to inject arbitrary web script or HTML via unspecified…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the web interface in Cerberus FTP Server before 2.46 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FS
Ftp Server · Cerberus
through 2.45 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5930
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5930
osvdb.org
http://osvdb.org/38789
Patch
http://secunia.com/advisories/27569
www.cerberusftp.com
http://www.cerberusftp.com/cerberus-releasenotes.htm#ReleaseNotes
www.securityfocus.com
http://www.securityfocus.com/bid/26381
www.vupen.com
http://www.vupen.com/english/advisories/2007/3805
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/38320
More from Ftp Server
–
CVE-2003-1476
Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access