Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/09/29 12:00 a.m.•4 views

CVE-2009-3478: Improper Control of Generation of Code

Argument injection vulnerability in 1 src/content/js/connection/sftp.js and 2 src/content/js/connection/controlSocket.js.in in FireFTP Extension 1.0.5 for Firefox allows remote authenticated SFTP users to cause victims to alter permissions, delete, download, or move the wrong file via a filename...

6CVSS5.9AI score0.01254EPSS
SaveExploits1References2
Rows per page
Query Builder