CVE-2010-2428

Published: Jun 24, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in admin_loginok.html in the Administrator web interface in Wing FTP Server for Windows 3.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted POST request.

Affected (25)

Products: Wftpserver: Wing Ftp Server

Wftpserver

1 product

Wing Ftp Server

Configuration A

25 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wftpserver Wing Ftp Server	version ≤ 3.5.0
Wftpserver Wing Ftp Server	Version 1.1
Wftpserver Wing Ftp Server	Version 1.2
Wftpserver Wing Ftp Server	Version 1.3
Wftpserver Wing Ftp Server	Version 1.4
Wftpserver Wing Ftp Server	Version 1.5
Wftpserver Wing Ftp Server	Version 1.6
Wftpserver Wing Ftp Server	Version 2.0
Wftpserver Wing Ftp Server	Version 2.1
Wftpserver Wing Ftp Server	Version 2.3
Wftpserver Wing Ftp Server	Version 2.4
Wftpserver Wing Ftp Server	Version 3.0.0
Wftpserver Wing Ftp Server	Version 3.1.0
Wftpserver Wing Ftp Server	Version 3.1.2
Wftpserver Wing Ftp Server	Version 3.2.0
Wftpserver Wing Ftp Server	Version 3.2.4
Wftpserver Wing Ftp Server	Version 3.2.8
Wftpserver Wing Ftp Server	Version 3.3.0
Wftpserver Wing Ftp Server	Version 3.3.4
Wftpserver Wing Ftp Server	Version 3.3.5
Wftpserver Wing Ftp Server	Version 3.4.0
Wftpserver Wing Ftp Server	Version 3.4.1
Wftpserver Wing Ftp Server	Version 3.4.2
Wftpserver Wing Ftp Server	Version 3.4.3
Wftpserver Wing Ftp Server	Version 3.4.5