Cross site scripting

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

Design/Logic Flaw

Weak access control in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

Design/Logic Flaw

Insecure default permissions in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37875 Cross-Site Scripting Vulnerability in Wing FTP Server <= 7.2.0

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37875 Cross-Site Scripting Vulnerability in Wing FTP Server <= 7.2.0

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37875

CVE-2023-37875 affects Wing FTP Server ≤ 7.2.0 via the User Web Client, where improper encoding/escaping of output causes a Cross-Site Scripting (XSS) vulnerability. The issue is documented across multiple sources (NVD, CVE lists) with the root cause described as incorrect output encoding. Exploi...

CVE-2023-37878 Insecure Default Permissions in Wing FTP Server <= 7.2.0

Insecure default permissions in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37878 Insecure Default Permissions in Wing FTP Server <= 7.2.0

Insecure default permissions in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37878

CVE-2023-37878 describes an insecure default permission issue in the Wing FTP Server Admin Web Client that enables privilege escalation on Wing FTP Server versions

CVE-2023-37879 Exposed Session Variable in Wing FTP Server <= 7.2.0

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37879

CVE-2023-37879 affects Wing FTP Server (User Web Client) up to version 7.2.0, where insecure storage of sensitive information enables information elicitation. Multiple sources confirm the issue as a sensitive-info disclosure via the User Web Client, with impact on confidentiality and no indicatio...

CVE-2023-37881

The CVE-2023-37881 entry concerns Wing FTP Server (Admin Web Client), with a root cause described as weak access control that enables privilege escalation. Affected version range is Wing FTP Server

CVE-2023-37881 Weak Access Control between Domains in Wing FTP Server <= 7.2.0

Weak access control in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37881 Weak Access Control between Domains in Wing FTP Server <= 7.2.0

Weak access control in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

PT-2023-26158

Name of the Vulnerable Software and Affected Versions Wing FTP Server versions = 7.2.0 Description Weak access control in the Admin Web Client of Wing FTP Server allows for privilege escalation. Recommendations For versions = 7.2.0, update to a version greater than 7.2.0 to resolve the issue. As ...

Wing FTP Server Security Vulnerability

Wing FTP Server is a cross-platform FTP server software. A security vulnerability exists in Wing FTP Server 7.2.0 and prior versions, which stems from an incorrect output encoding of the User Web Client, resulting in a cross-site scripting XSS vulnerability...

PT-2023-26154

Name of the Vulnerable Software and Affected Versions Wing FTP Server versions = 7.2.0 Description The issue is related to improper encoding or escaping of output in the User Web Client of Wing FTP Server, allowing Cross-Site Scripting XSS. Recommendations For versions = 7.2.0, update to a versio...

CVE-2023-37875: Improper Encoding or Escaping of Output

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

PT-2023-26155 · Unknown · Wing Ftp Server

Name of the Vulnerable Software and Affected Versions: Wing FTP Server versions = 7.2.0 Description: Insecure default permissions in the Admin Web Client of Wing FTP Server allow for privilege escalation. Recommendations: For versions = 7.2.0, update to a version later than 7.2.0 to resolve the...

CVE-2023-37879: Insecure Storage of Sensitive Information

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...