PT-2020-12790

Name of the Vulnerable Software and Affected Versions ProVide formerly zFTPServer versions through 13.1 Description An issue was discovered that allows HTTP Response Splitting via the language parameter in the "/ajax/GetInheritedProperties" API endpoint. Recommendations For ProVide versions throu...

PT-2020-12793

Name of the Vulnerable Software and Affected Versions ProVide formerly zFTPServer versions through 13.1 Description An issue was discovered in the Admin Interface, allowing Cross-Site Request Forgery CSRF for various actions, including changing usernames and passwords including admin accounts,...

PT-2020-12788

Name of the Vulnerable Software and Affected Versions ProVide formerly zFTPServer versions prior to 13.2 Description An issue exists in the User Web Interface of the affected software, where a CSRF condition allows granting filesystem access to the public. This access enables uploading and deleti...