325 matches found
Cross site scripting
An issue was discovered in CrushFTP 9. The creation of a new user through the /WebInterface/UserManager/ interface allows an attacker, with access to the administration panel, to perform Stored Cross-Site Scripting XSS. The payload can be executed in multiple scenarios, for example when the user'...
CVE-2021-44076
An issue was discovered in CrushFTP 9. The creation of a new user through the /WebInterface/UserManager/ interface allows an attacker, with access to the administration panel, to perform Stored Cross-Site Scripting XSS. The payload can be executed in multiple scenarios, for example when the user'...
CVE-2021-44076
CrushFTP 9 is affected. The vulnerability arises when creating a new user via the "/WebInterface/UserManager/" interface, where an attacker with access to the administration panel can trigger Stored XSS. The payload may execute in scenarios such as when the user’s page appears in the Most Visited...
PT-2022-11976 · Crushftp · Crushftp
Name of the Vulnerable Software and Affected Versions: CrushFTP version 9 Description: An issue was discovered in the creation of a new user through the "/WebInterface/UserManager/" interface, allowing an attacker with access to the administration panel to perform Stored Cross-Site Scripting XSS...
CrushFTP 跨站脚本漏洞
CrushFTP is a file transfer server. A security vulnerability exists in CrushFTP version 9, which can be exploited by an attacker to execute stored cross-site scripting XSS by accessing the administration panel...
CVE-2018-18288
CrushFTP through 8.3.0 is vulnerable to credentials theft via URL redirection...
CVE-2018-18288
CrushFTP through 8.3.0 is vulnerable to credentials theft via URL redirection...
Design/Logic Flaw
CrushFTP through 8.3.0 is vulnerable to credentials theft via URL redirection...
CVE-2018-18288
CrushFTP through 8.3.0 is vulnerable to credentials theft via URL redirection...
CVE-2018-18288
CrushFTP
PT-2019-9574 · Crushftp · Crushftp
Name of the Vulnerable Software and Affected Versions: CrushFTP versions prior to 8.3.1 Description: The issue allows for credentials theft via URL redirection. Recommendations: For CrushFTP versions prior to 8.3.1, update to version 8.3.1 or later to resolve the issue...
Unspecified vulnerability in CrushFTP (CNVD-2020-03729)
CrushFTP is a file transfer server. A security vulnerability exists in CrushFTP 8.3.0 and earlier versions that can be exploited by attackers to steal credentials...
CrushFTP HTTP Injection Vulnerability
CrushFTP is a cross-platform Java FTP server from the U.S. CrushFTP company . A security vulnerability exists in CrushFTP versions prior to 7.8.0 and 8.x versions prior to 8.2.0. No detailed vulnerability details are provided at this time...
Unspecified vulnerability in CrushFTP (CNVD-2017-30771)
CrushFTP is a cross-platform Java FTP server from the U.S. CrushFTP company . A security vulnerability exists in version 8.x prior to CrushFTP 8.2.0. No detailed vulnerability details are provided at this time...
CrushFTP Cross-Site Scripting Vulnerability
CrushFTP is a cross-platform Java FTP server . CrushFTP suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensitive information or hijack user sessions when malicious dat...
Unspecified Vulnerability in CrushFTP
CrushFTP is a cross-platform Java FTP server from the U.S. CrushFTP company . A security vulnerability exists in CrushFTP versions prior to 7.8.0 and 8.x versions prior to 8.2.0. No detailed vulnerability details are provided at this time...
CVE-2017-14038
CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability...
CVE-2017-14035
CrushFTP 8.x before 8.2.0 has a serialization vulnerability...