CrushFTP 7.2.0 - Multiple Vulnerabilities

======================================================== I. Overview ======================================================== Multiple CSRF & Cross-Site Scripting XSS vulnerabilities have been identified in Crushftp 7.2.0 Web Interface on default configuration. These vulnerabilities allows an...

CrushFTP 7.2.0 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

CrushFTP version 7.2.0 suffers from cross site request forgery and cross site scripting vulnerabilities. ======================================================= I. Overview ======================================================== Multiple CSRF & Cross-Site Scripting XSS vulnerabilities have been...

Google Search Appliance dynamic navigation cross-site scripting vulnerability

Overview Google Search Appliance GSA devices contain a cross-site scripting XSS vulnerability when dynamic navigation is enabled. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Google Search Appliance versions earlier than 7.2.0.G.114 and...

CVE-2002-1825

Format string vulnerability in PerlRTEexample1.pl in WASD 7.1, 7.2.0 through 7.2.3, and 8.0.0 allows remote attackers to execute arbitrary commands or crash the server via format strings in the $name variable...