Lucene search
+L

7 matches found

CNVD
CNVD
•added 2017/08/22 12:00 a.m.•20 views

Youngzsoft CCFile Denial of Service Vulnerability

Youngzsoft CCFile aka CC File Transfer is a file transfer program. The program is capable of transferring files via Internet and LAN. A security vulnerability exists in Youngzsoft CCFile version 3.6. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request to...

7.5CVSS7.5AI score0.02268EPSS
SaveExploits5References1
attackerkb
attackerkb
•added 2017/08/21 7:29 a.m.•13 views

CVE-2017-12784

In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...

10CVSS5.6AI score0.24603EPSS
SaveExploits5References2
Prion
Prion
•added 2017/08/21 7:29 a.m.•22 views

Design/Logic Flaw

In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...

5CVSS8.4AI score0.24603EPSS
SaveExploits5References1Affected Software1
NVD
NVD
•added 2017/08/21 7:29 a.m.•33 views

CVE-2017-12784

In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...

7.5CVSS8.5AI score0.02268EPSS
SaveExploits5References1
Cvelist
Cvelist
•added 2017/08/21 7:00 a.m.•35 views

CVE-2017-12784

In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...

8.6AI score0.02268EPSS
SaveExploits5References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/21 12:00 a.m.•6 views

CVE-2017-12784: Improper Input Validation

In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...

7.5CVSS5.8AI score0.02268EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2017/08/21 12:00 a.m.•4 views

PT-2017-12692

Name of the Vulnerable Software and Affected Versions Youngzsoft CCFile aka CC File Transfer version 3.6 Description The issue allows a malicious user to remotely crash the affected software by sending a crafted HTTP request. No authentication is required to exploit this. An example of a maliciou...

7.5CVSS0.02268EPSS
SaveExploits5References3
Rows per page
Query Builder