medium5.4
CVE-2015-7676
Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows remote authenticated users to conduct cr…
Impact
Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows remote authenticated users to conduct cross-site scripting (XSS) attacks by uploading HTML files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipswitch | Moveit Dmz | through 8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/135458/Ipswitch-MOVEit-DMZ-8.1-Persistent-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2016/Jan/95
- http://www.securityfocus.com/bid/90574
- https://profundis-labs.com/advisories/CVE-2015-7676.txt
- http://packetstormsecurity.com/files/135458/Ipswitch-MOVEit-DMZ-8.1-Persistent-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2016/Jan/95
- http://www.securityfocus.com/bid/90574
- https://profundis-labs.com/advisories/CVE-2015-7676.txt