Netwin: >> Surgeftp >> 2.3a6 Security Vulnerabilities
Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request.
CVSS Score
7.5
EPSS Score
0.042
Published
2013-08-09
Multiple cross-site scripting (XSS) vulnerabilities in surgeftpmgr.cgi in NetWin SurgeFTP 2.3a6 allow remote attackers to inject arbitrary web script or HTML via the (1) domainid or (2) classid parameter in a class action.
CVSS Score
4.3
EPSS Score
0.003
Published
2010-03-23