Accellion FTA 操作系统命令注入漏洞

Accellion File Transfer Appliance FTA is a secure file transfer service that allows users to share and synchronize files online, all encrypted with AES 128/256. An OS command injection vulnerability exists in Accellion FTA 912411 and earlier versions. The vulnerability can be exploited to execute...

Singtel Suffers Zero-Day Cyberattack, Damage Unknown

Singtel, Tier 1 telecom carrier throughout Asia and owner of Australian telco Optus, has been impacted by a software security hole in a third-party file transfer appliance targeted by attackers. Singtel is one of multiple organizations affected by the bug, including an Australian medical research...

Qiata FTA 1.70.19 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2020-024 Product: Qiata FTA Manufacturer: Secudos GmbH Affected Versions: ' by flipping the direction of the special character. Also, quotation marks are escaped properly. An attacker can use the behavior to construct a malicious...

Accellion File Transfer Appliance Operating System Command Injection Vulnerability

Accellion File Transfer Appliance is a file transfer appliance from Accellion, USA. The product supports sharing and synchronizing files online using AES 128/256, among other things. A command injection vulnerability exists in Accellion File Transfer Appliance version FTA80540. The vulnerability...

Accellion File Transfer Appliance Trust Management Issues Vulnerability

Accellion File Transfer Appliance is a file transfer appliance from Accellion, USA. The product supports sharing and synchronizing files online using AES 128/256, among other things. A trust management issue vulnerability exists in the Accellion File Transfer Appliance version FTA80540. The...

CVE-2019-5622

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

Hardcoded credentials

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

Command injection

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection'...

CVE-2019-5623 Accellion File Transfer Appliance Improper Neutralization of Special Elements used in a Command ('Command Injection')

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection'...

CVE-2019-5623

CVE-2019-5623 affects Accellion File Transfer Appliance, specifically FTA_8_0_540, with a command injection flaw (CWE-77) arising from improper neutralization of input in the construction of executable commands. The vulnerability is network-exposed and could allow an attacker to execute commands ...

PT-2020-11149

Name of the Vulnerable Software and Affected Versions Accellion File Transfer Appliance version FTA 8 0 540 Description The issue is related to the use of hard-coded credentials, which is an instance of CWE-798. This means that the credentials are embedded directly in the software, potentially...

PT-2020-11150

Name of the Vulnerable Software and Affected Versions Accellion File Transfer Appliance version FTA 8 0 540 Description The issue is related to an instance of CWE-77, which involves improper neutralization of special elements used in a command, also known as command injection. This allows for...

CVE-2019-5622: Use of Hard-coded Credentials

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-798: Use of Hard-coded Credentials...

CVE-2019-5623: Improper Neutralization of Special Elements used in a Command

Accellion File Transfer Appliance version FTA80540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection'...

CVE-2015-2856

Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA911210 allows remote attackers to read arbitrary files via a .. dot dot in the statecode cookie...

CVE-2015-2856

CVE-2015-2856 affects Accellion File Transfer Appliance (FTA) prior to FTA_9_11_210. A directory traversal flaw in the template function of functions.inc allows remote attackers to read arbitrary files by manipulating the statecode cookie (statecode-based path traversal). Public exploit/module ex...

PT-2017-6615

Name of the Vulnerable Software and Affected Versions Accellion File Transfer Appliance devices versions prior to FTA 9 11 210 Description A directory traversal issue exists in the template function in function.inc, allowing remote attackers to read arbitrary files by including a .. dot dot in th...

CVE-2015-2856: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA911210 allows remote attackers to read arbitrary files via a .. dot dot in the statecode cookie...

PT-2017-6616

Name of the Vulnerable Software and Affected Versions Accellion File Transfer Appliance versions prior to FTA 9 11 210 Description The issue allows remote attackers to execute arbitrary code via shell metacharacters in the oauth token parameter. Recommendations For Accellion File Transfer Applian...

CVE-2015-2857: Improper Neutralization of Special Elements used in a Command

Accellion File Transfer Appliance before FTA911210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauthtoken parameter...