Authentication flaw

Accellion File Transfer Appliance before FTA911210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauthtoken parameter...

CVE-2015-2857

CVE-2015-2857 affects Accellion File Transfer Appliance (FTA) prior to FTA_9_11_210. The vulnerability allows remote code execution via shell metacharacters in the oauth_token parameter, caused by insufficient input sanitization. Public references and sightings indicate exploit tooling exist (e.g...

CVE-2015-2857

Accellion File Transfer Appliance before FTA911210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauthtoken parameter...

Accellion FTA Device CRLF Vulnerability

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. A CRLF vulnerability exists in versions of Accellion FTA devices prior to FTA912180. A remote attacker could exploit this...

Accellion FTA Device Cross-Site Scripting Vulnerability (CNVD-2017-07450)

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. A cross-site scripting vulnerability exists in home/seos/courier/smtpgadd.html in Accellion FTA devices versions prior to FTA912180....

Accellion FTA Appliance SQL Injection Vulnerability

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. An SQL injection vulnerability exists in seos/courier/communicationp2p.php in Accellion FTA devices versions prior to FTA912180, whi...

Accellion FTA device CRLF vulnerability (CNVD-2017-07459)

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. A CRLF vulnerability exists in versions of Accellion FTA devices prior to FTA912180. Allows remote attackers to execute commands via...

Unspecified vulnerability in Accellion FTA devices (CNVD-2017-07457)

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. An unspecified vulnerability exists in Accellion FTA devices versions prior to FTA912180. A remote attacker can exploit this...

Accellion FTA Device Cross-Site Scripting Vulnerability (CNVD-2017-07451)

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. A cross-site scripting vulnerability exists in home/seos/courier/useradd.html in Accellion FTA devices versions prior to FTA912180. ...

Accellion FTA Device LDAP Injection Vulnerability

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. An LDAP injection vulnerability exists in the home/seos/courier/ldaptest.html file in versions of Accellion FTA devices prior to...

Unspecified Vulnerability in Accellion FTA Devices (CNVD-2017-07456)

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. Accellion FTA设备FTA912180之前的版本中的courier/web/1000@/wmProgressval.html页面存在未明漏洞 The vulnerability stems from a regular expression missin...

Accellion FTA Device Cross-Site Scripting Vulnerability

Accellion File Transfer is a web-based file transfer/synchronization system. A cross-site scripting vulnerability exists in the Accellion FTA appliance FTA912180 and prior versions. 允许远程攻击者可以通过courier/1000@/index.html中的authparams参数注入任意的web脚本或HTML...

Accellion FTA Device Cross-Site Scripting Vulnerability (CNVD-2017-07449)

Accellion File Transfer is a web-based file transfer/synchronization system. A cross-site scripting vulnerability exists in the Accellion FTA appliance FTA912180 and prior versions. This allows remote attackers to inject arbitrary web script or HTML...

Unspecified Vulnerability in Accellion FTA Devices

Accellion File Transfer is a web-based file transfer/synchronization system. An unspecified vulnerability exists in versions prior to Accellion FTA TA912180. Allows an attacker to remotely execute shell metacharacters in method parameters...

Cross site scripting

An issue was discovered on Accellion FTA devices before FTA912180. There is XSS in courier/1000@/index.html with the authparams parameter. The device tries to use internal WAF filters to stop specific XSS Vulnerabilities. However, these can be bypassed by using some modifications to the payloads,...

Sql injection

An issue was discovered on Accellion FTA devices before FTA912180. Because mysqlrealescapestring is misused, seos/courier/communicationp2p.php allows SQL injection with the appid parameter...

CVE-2017-8304

An issue was discovered on Accellion FTA devices before FTA912180. courier/1000@/oauth/playground/callback.html allows XSS with a crafted URI...

Design/Logic Flaw

An issue was discovered on Accellion FTA devices before FTA912180. There is XSS in home/seos/courier/useradd.html with the param parameter...

CVE-2017-8791

An issue was discovered on Accellion FTA devices before FTA912180. There is a home/seos/courier/login.html authparams CRLF attack vector...

CVE-2017-8788

An issue was discovered on Accellion FTA devices before FTA912180. There is a CRLF vulnerability in settingsglobaltextedit.php allowing ?display=x%0Dnewline attacks...