Wing FTP Server < 3.6.6 DoS

According to its banner, the remote host is running a version of Wing FTP Server earlier than 3.6.6. Such versions reportedly fail to handle certain specially crafted HTTP requests. An attacker could exploit this issue to trigger a denial of service condition, and crash the remote service. C...

Wing FTP Server < 3.6.1 DoS and Information Disclosure Vulnerabilities

Wing FTP Server is prone to a denial of service DoS vulnerability and an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Wing FTP Server < 3.2.0 PORT Command DoS

According to its banner, the remote host is running a version of Wing FTP Server earlier than 3.2.0. Such versions are reportedly affected by a denial of service vulnerability. By sending a specially crafted 'PORT' command with an invalid parameter, it may be possible for an attacker to crash the...

Wing FTP Server < 3.6.1 Multiple Flaws

According to its banner, the remote host is running a version of Wing FTP Server earlier than 3.6.1. Such versions are reportedly affected by multiple issues : - An unspecified issue in the SSH implementation could allow an authenticated attacker to trigger a denial of service condition. - An...

Wing FTP Server < 3.5.1 XSS

According to its banner, the remote host is running a version of Wing FTP Server earlier than 3.5.1. The web server included with such versions is affected by a cross-site scripting vulnerability. By sending a specially crafted 'POST' request to the admin web interface, an authenticated, remote...

CVE-2010-2428

Cross-site scripting XSS vulnerability in adminloginok.html in the Administrator web interface in Wing FTP Server for Windows 3.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted POST request...

CVE-2010-2428

CVE-2010-2428 affects Wing FTP Server for Windows 3.5.0 and earlier; the admin_loginok.html page is vulnerable to cross-site scripting via a crafted POST, allowing an authenticated remote attacker to inject arbitrary script/HTML in the user’s browser. Several sources (NVD, OpenVAS, Nessus) corrob...

Wing FTP Server PORT Command DoS Vulnerability

Discovery Date: Nov 14, 2009 Risk: Important Affected Software: Wing FTP Server 3.1.2 Description: There is a Denial of Service DoS vulnerability that exists in Wing FTP Server 3.1.2. The said vulnerability can be exploited by using an invalid parameter for PORT command. When exploited...

Wing FTP Server PORT命令远程拒绝服务漏洞

BUGTRAQ ID: 41015 Wing FTP server是安全的多协议文件服务器。 远程攻击者可以通过向Wing FTP Server提交带有无效参数的PORT命令导致服务器崩溃。 Wing FTP Server 3.1.2 厂商补丁： wftpserver.com -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wftpserver.com/serverhistory.htm...

Wing FTP Server DoS

Crash on PORT command parsing...

Wing FTP Server <= 3.1.2 'PORT' Command DoS Vulnerability

Wing FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wing FTP Server 3.5 admin_loginok.html页面HTML注入漏洞

BUGTRAQ: 40510 Wing FTP server的Administrator控制台（http://x.x.x.x:5466/adminloginok.html ）没有正确地过滤用户所提交请求中的参数，远程攻击者可以通过提交POST请求执行存储式跨站脚本攻击。 Wing FTP Server 3.5 厂商补丁： wftpserver.com -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.wftpserver.com/index.htm...

Wing FTP Server - Cross Site Scripting Vulnerability

Security Advisory: Wing FTP Server - Cross Site Scripting Vulnerability ======================================================== Discovered Date: May 31, 2010 System affected: Wing FTP Server for Windows, Version 3.5.0 and prior version Vulnerability Description: ================== Wing FTP serve...

Wing FTP Server crossite scripting

Crossite scripting in administration interface...

Wing FTP Server 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie- based authentication credentials an...

Wing FTP Server <= 3.5.0 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Wing FTP Server 3.4.3 Directory Traversal

+------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | |...

Wing FTP Server < 3.4.5 HTTP Request Directory Traversal

Binary data 5524.prm...

Wing FTP Server < 3.4.1 Multiple Information Disclosure Vulnerabilities

Binary data 5523.prm...

Wing FTP Server Information Disclosure Vulnerabilities

No description provided by source. Some vulnerabilities have been reported in Wing FTP Server, which can be exploited by malicious users and malicious people to disclose potentially sensitive information. 1 Input passed to the Web Client is not properly sanitised before being used. This can be...