CVE-2019-16116

EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash...

CVE-2022-2560

This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...

CVE-2022-2560

This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...

Design/Logic Flaw

This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...

CVE-2022-2560: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...

CVE-2022-2560

This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...

PT-2022-8164

Name of the Vulnerable Software and Affected Versions EnterpriseDT CompleteFTP versions prior to 12.1.4 Description The issue allows for Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM. Recommendations For versions prior to...

CVE-2019-16864: Improper Neutralization of Special Elements used in a Command

CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM...

CVE-2019-16116: Use of a Broken or Risky Cryptographic Algorithm

EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash...

PT-2019-14520

Name of the Vulnerable Software and Affected Versions EnterpriseDT CompleteFTP Server versions prior to 12.1.3 Description The issue allows an attacker to obtain the administrator password hash due to information exposure in the Bootstrap.log file. Recommendations For EnterpriseDT CompleteFTP...