VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 28, 2007· Updated Jun 16, 2026

CVE-2007-4555

CVE-2007-4555

Description

Cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to create a new admin account.

Affected products

2
  • Ipswitch, Inc./Ws FTP2 versions
    cpe:2.3:a:ipswitch:ws_ftp:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ipswitch:ws_ftp:*:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.