Vulnerabilities > Swsoft > Confixx

DATE CVE VULNERABILITY TITLE RISK
2006-06-23 CVE-2006-3180 Cross-Site Scripting vulnerability in Swsoft Confixx Pro3
Cross-site scripting (XSS) vulnerability in ftp_index.php in Confixx Pro 3.0 allows remote attackers to inject arbitrary web script or HTML via the path parameter.
network
swsoft
6.8
2006-06-23 CVE-2006-3179 Cross-Site Scripting vulnerability in SWSoft Confixx Pro
Cross-site scripting (XSS) vulnerability in tools_ftp_pwaendern.php in Confixx Pro 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the account parameter.
network
swsoft
4.3
2006-05-17 CVE-2006-2423 Cross-Site Scripting vulnerability in Confixx 3.0.6/3.0.8
Cross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the login parameter.
network
swsoft
4.3
2006-04-13 CVE-2006-1759 Cross-Site Scripting vulnerability in Swsoft Confixx 3.1.2
Cross-site scripting (XSS) vulnerability in allgemein_transfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter.
network
high complexity
swsoft
2.6
2006-04-13 CVE-2006-1754 SQL Injection vulnerability in Swsoft Confixx 3.0.6/3.0.8/3.1.2
SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the SID parameter.
network
low complexity
swsoft
7.5
2005-05-02 CVE-2005-1302 SQL Injection vulnerability in Swsoft Confixx 3.0.6/3.0.8/Pro3
SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field.
network
low complexity
swsoft
7.5