1231 matches found
CVE-2023-37881: Incorrect Authorization
Weak access control in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...
PT-2023-26158
Name of the Vulnerable Software and Affected Versions Wing FTP Server versions = 7.2.0 Description Weak access control in the Admin Web Client of Wing FTP Server allows for privilege escalation. Recommendations For versions = 7.2.0, update to a version greater than 7.2.0 to resolve the issue. As ...
Wing FTP Server Security Vulnerability
Wing FTP Server is a cross-platform FTP server software. A security vulnerability exists in Wing FTP Server 7.2.0 and prior versions, which stems from an incorrect output encoding of the User Web Client, resulting in a cross-site scripting XSS vulnerability...
PT-2023-26154
Name of the Vulnerable Software and Affected Versions Wing FTP Server versions = 7.2.0 Description The issue is related to improper encoding or escaping of output in the User Web Client of Wing FTP Server, allowing Cross-Site Scripting XSS. Recommendations For versions = 7.2.0, update to a versio...
CVE-2023-37875: Improper Encoding or Escaping of Output
Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...
CVE-2023-37878: Incorrect Default Permissions
Insecure default permissions in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...
Wing FTP Server Security Vulnerability
Wing FTP Server is a cross-platform FTP server software. A security vulnerability exists in Wing FTP Server 7.2.0 and earlier versions, which stems from a sensitive information disclosure vulnerability in the ser Web Client...
CVE-2023-37879: Insecure Storage of Sensitive Information
Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...
Wing FTP Server Security Vulnerability
Wing FTP Server is a cross-platform FTP server software. A security vulnerability exists in Wing FTP Server 7.2.0 and earlier versions, which stems from a weak access control mechanism in the Admin Web Client that allows an attacker to perform elevation of privilege...
CVE-2023-40705
Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script...
CVE-2023-39938
Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to inject an arbitrary script...
CVE-2023-40535
Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script...
CVE-2023-39938
Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to inject an arbitrary script...
CVE-2023-40535
Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script...
CVE-2023-38574
Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL...
CVE-2023-38574
Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL...
Cross site scripting
Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to inject an arbitrary script...
Open redirect
Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL...
