441 matches found
CVE-2010-2428
Cross-site scripting XSS vulnerability in adminloginok.html in the Administrator web interface in Wing FTP Server for Windows 3.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted POST request...
CVE-2010-2428
CVE-2010-2428 affects Wing FTP Server for Windows 3.5.0 and earlier; the admin_loginok.html page is vulnerable to cross-site scripting via a crafted POST, allowing an authenticated remote attacker to inject arbitrary script/HTML in the user’s browser. Several sources (NVD, OpenVAS, Nessus) corrob...
Wing FTP Server DoS
Crash on PORT command parsing...
Wing FTP Server <= 3.1.2 'PORT' Command DoS Vulnerability
Wing FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Wing FTP Server PORT命令远程拒绝服务漏洞
BUGTRAQ ID: 41015 Wing FTP server是安全的多协议文件服务器。 远程攻击者可以通过向Wing FTP Server提交带有无效参数的PORT命令导致服务器崩溃。 Wing FTP Server 3.1.2 厂商补丁： wftpserver.com -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wftpserver.com/serverhistory.htm...
Wing FTP Server PORT Command DoS Vulnerability
Discovery Date: Nov 14, 2009 Risk: Important Affected Software: Wing FTP Server 3.1.2 Description: There is a Denial of Service DoS vulnerability that exists in Wing FTP Server 3.1.2. The said vulnerability can be exploited by using an invalid parameter for PORT command. When exploited...
Wing FTP Server 3.5 admin_loginok.html页面HTML注入漏洞
BUGTRAQ: 40510 Wing FTP server的Administrator控制台（http://x.x.x.x:5466/adminloginok.html ）没有正确地过滤用户所提交请求中的参数，远程攻击者可以通过提交POST请求执行存储式跨站脚本攻击。 Wing FTP Server 3.5 厂商补丁： wftpserver.com -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.wftpserver.com/index.htm...
Wing FTP Server 'admin_loginok.html' HTML Injection Vulnerability
Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie- based authentication credentials an...
Wing FTP Server - Cross Site Scripting Vulnerability
Security Advisory: Wing FTP Server - Cross Site Scripting Vulnerability ======================================================== Discovered Date: May 31, 2010 System affected: Wing FTP Server for Windows, Version 3.5.0 and prior version Vulnerability Description: ================== Wing FTP serve...
Wing FTP Server crossite scripting
Crossite scripting in administration interface...
Wing FTP Server <= 3.5.0 'admin_loginok.html' HTML Injection Vulnerability
Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Wing FTP Server 3.4.3 Directory Traversal
+------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | |...
Wing FTP Server < 3.4.5 HTTP Request Directory Traversal
Binary data 5524.prm...
Wing FTP Server < 3.4.1 Multiple Information Disclosure Vulnerabilities
Binary data 5523.prm...
Wing FTP Server Information Disclosure Vulnerabilities
No description provided by source. Some vulnerabilities have been reported in Wing FTP Server, which can be exploited by malicious users and malicious people to disclose potentially sensitive information. 1 Input passed to the Web Client is not properly sanitised before being used. This can be...
Wing FTP Server < 3.4.1 Multiple Information Disclosure Vulnerabilities
Wing FTP Server is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Wing FTP Server 3.2.4 - Cross-Site Request Forgery
Wing FTP Server 3.2.4 - Cross-Site Request Forgery Application: WingFTP Server 3.2.4 maybe earlier versions too Link: http://www.wftpserver.com/ Vulnerability: CSRF Author: Ams Contact: mail: ax330d at gmail dot com site: http://www.0x416d73.name/ 1. About software "Wing FTP server is not only a...
Wing FTP Server v3.2.4 CSRF Vulnerability
No description provided by source. Application: WingFTP Server 3.2.4 maybe earlier versions too Link: http://www.wftpserver.com/ Vulnerability: CSRF Author: Ams Contact: mail: ax330d at gmail dot com site: http://www.0x416d73.name/ 1. About software "Wing FTP server is not only a FTP server. It's...
Wing FTP Server 3.2.4 - Cross-Site Request Forgery
Application: WingFTP Server 3.2.4 maybe earlier versions too Link: http://www.wftpserver.com/ Vulnerability: CSRF Author: Ams Contact: mail: ax330d at gmail dot com site: http://www.0x416d73.name/ 1. About software "Wing FTP server is not only a FTP server. It's a multi-protocol file serverFTP,...
Staying safe online: The need for cybersecurity
On the day that President Obama releases a cybersecurity policy review, hear from experts and officials in the field. This video features Janet Napolitano, Secretary of Homeland Security; William Pelgrin, Chief Cybersecurity Officer of New York; John Thompson, CEO of Symantec; Leslie Harris of th...