Description (CNA)
Accellion FTP server prior to version FTA_9_12_220 uses the Accusoft Prizm Content flash component, which contains multiple parameters (customTabCategoryName, customButton1Image) that are vulnerable to cross-site scripting.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Accellion / FTP Server | affected FTA_9_12_220 before FTA_9_12_220 |
CWE
CWE-80
References
- https://www.qualys.com/2016/12/06/qsa-2016-12-06/qsa-2016-12-06.pdf
- https://www.securityfocus.com/bid/96154
- https://www.kb.cert.org/vuls/id/745607
ADP enrichment
No English description supplied.