Approved changes feed: RSS · Atom

cpe:2.3:a:netwin:surgeftp:2.3a6:*:*:*:*:*:*:*

part: a version: 2.3a6 update: *

VendorNetwin (84440f9c-0c8f-54f6-a00b-4d1ca5722029)
ProductSurgeftp (720c321e-b60b-53ef-9427-9fc11718e7dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-4742 vulnerable 2026-06-08 05:04:49.524026 Details available
Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request.
Published: 2013-08-09T21:00:00.000Z
Updated: 2024-08-06T16:52:27.001Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1068 vulnerable 2026-06-08 04:54:04.803846 Details available
Multiple cross-site scripting (XSS) vulnerabilities in surgeftpmgr.cgi in NetWin SurgeFTP 2.3a6 allow remote attackers to inject arbitrary web script or HTML via the (1) domainid or (2) classid parameter in a class action.
Published: 2010-03-23T18:00:00.000Z
Updated: 2024-08-07T01:14:05.249Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.