Unspecified vulnerability in CrushFTP (CNVD-2017-30771)

CrushFTP is a cross-platform Java FTP server from the U.S. CrushFTP company . A security vulnerability exists in version 8.x prior to CrushFTP 8.2.0. No detailed vulnerability details are provided at this time...

CrushFTP HTTP Injection Vulnerability

CrushFTP is a cross-platform Java FTP server from the U.S. CrushFTP company . A security vulnerability exists in CrushFTP versions prior to 7.8.0 and 8.x versions prior to 8.2.0. No detailed vulnerability details are provided at this time...

CrushFTP Cross-Site Scripting Vulnerability

CrushFTP is a cross-platform Java FTP server . CrushFTP suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious dat...

Unspecified Vulnerability in CrushFTP

CrushFTP is a cross-platform Java FTP server from the U.S. CrushFTP company . A security vulnerability exists in CrushFTP versions prior to 7.8.0 and 8.x versions prior to 8.2.0. No detailed vulnerability details are provided at this time...

CVE-2017-14038

CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability...

CVE-2017-14035

CrushFTP 8.x before 8.2.0 has a serialization vulnerability...

Cross site scripting

CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS...

CVE-2017-14037

CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability...

Design/Logic Flaw

CrushFTP 8.x before 8.2.0 has a serialization vulnerability...

CVE-2017-14035

CrushFTP 8.x before 8.2.0 has a serialization vulnerability...

Design/Logic Flaw

CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability...

CVE-2017-14036

CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS...

CVE-2017-14037

CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability...

CVE-2017-14038

CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability...

CVE-2017-14036

CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS...

Design/Logic Flaw

CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability...

CVE-2017-14035

CrushFTP 8.x before 8.2.0 is affected by a serialization vulnerability. The connected records identify CrushFTP as the affected product and reference a serialization flaw in versions prior to 8.2.0. The supplied documents do not provide root-cause details, exploit information, impact specifics, o...

CVE-2017-14035

CrushFTP 8.x before 8.2.0 has a serialization vulnerability...

CVE-2017-14038

CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability...

CVE-2017-14036

CVE-2017-14036 corresponds to a Cross-Site Scripting (XSS) vulnerability in CrushFTP prior to 7.8.0 and in 8.x prior to 8.2.0. Multiple connected records corroborate the issue in CrushFTP, describing a vulnerability that allows an attacker to inject malicious script or HTML when a user views data...