CVE-2006-3132

Published: Jun 22, 2006Modified: Apr 16, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in qtofm.php4 in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, as originally reported for index.php.

Affected (1)

Products: Qto: Qtofilemanager

Qto

1 product

Qtofilemanager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Qto Qtofilemanager	Version 1.0

References (14)

http://secunia.com/advisories/20681

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1118

Source: cve@mitre.org

http://securitytracker.com/id?1016333

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/437754/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18510

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2434

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27310

Source: cve@mitre.org

http://secunia.com/advisories/20681