Security Advisory

CVE-2017-17933

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-12-29 18:00:00
Last updated 2024-08-05 21:06:49
Assigner mitre
State PUBLISHED

Description

cgi/surgeftpmgr.cgi (aka the Web Manager interface on TCP port 7021 or 9021) in NetWin SurgeFTP version 23f2 has XSS via the classid, domainid, or username parameter.