Description
cgi/surgeftpmgr.cgi (aka the Web Manager interface on TCP port 7021 or 9021) in NetWin SurgeFTP version 23f2 has XSS via the classid, domainid, or username parameter.
Unscored
CVE-2017-17933
EUVD-2017-9076GHSA-cqwp-wh79-mrf8
cgi/surgeftpmgr.cgi (aka the Web Manager interface on TCP port 7021 or 9021) in NetWin SurgeFTP version 23f2 has XSS via the classid, domai…
Published Dec 29, 2017 · Updated Aug 5, 2024 · Assigned by mitre