CVE-2006-3405

Published: Jul 7, 2006Modified: Apr 16, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) delete, (2) pathext, and (3) edit parameters.

Affected (1)

Products: Qto: Qtofilemanager

Qto

1 product

Qtofilemanager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Qto Qtofilemanager	Version 1.0

References (8)

http://securityreason.com/securityalert/1199

Source: cve@mitre.org

http://securitytracker.com/id?1016427

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/438960/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18791

Source: cve@mitre.org

Exploit

http://securityreason.com/securityalert/1199

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016427

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/438960/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18791

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.