3.0.8

DATE	CVE	VULNERABILITY TITLE	RISK
2006-05-17	CVE-2006-2423	Cross-Site Scripting vulnerability in Confixx 3.0.6/3.0.8 Cross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the login parameter. network swsoft	4.3
2006-04-13	CVE-2006-1754	SQL Injection vulnerability in Swsoft Confixx 3.0.6/3.0.8/3.1.2 SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the SID parameter. network low complexity swsoft	7.5
2005-05-02	CVE-2005-1302	SQL Injection vulnerability in Swsoft Confixx 3.0.6/3.0.8/Pro3 SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field. network low complexity swsoft	7.5