CVE-2005-4567

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-29 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (Build 4.4.000 Oct 26 2005) allow remote attackers to inject arbitrary web script or HTML by sending (1) the href parameter to index.fts, or the param1 parameter to (2) /domains/index.fts, (3) /config/licence.fts, or (4) /config/systemacl.fts.

Affected products

Floosietek Ftgate: 4.4_build_4.4.000

References

http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1015.html
http://securitytracker.com/id?1015399
http://www.osvdb.org/22104
http://www.osvdb.org/22105
http://www.osvdb.org/22106
http://www.osvdb.org/22107
http://www.securityfocus.com/bid/15972
http://www.vupen.com/english/advisories/2005/3010
http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1015.html
http://securitytracker.com/id?1015399
http://www.osvdb.org/22104
http://www.osvdb.org/22105

Get alerted when CVE-2005-4567 or the next vulnerability affects your stack