325 matches found
Design/Logic Flaw
CrushFTP 8.x before 8.2.0 has a serialization vulnerability...
CVE-2017-14035
CrushFTP 8.x before 8.2.0 has a serialization vulnerability...
Design/Logic Flaw
CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability...
CVE-2017-14036
CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS...
Design/Logic Flaw
CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability...
CVE-2017-14037
CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability...
CVE-2017-14038
CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability...
CVE-2017-14036
CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS...
CVE-2017-14035
CrushFTP 8.x before 8.2.0 has a serialization vulnerability...
CVE-2017-14035
CrushFTP 8.x before 8.2.0 is affected by a serialization vulnerability. The connected records identify CrushFTP as the affected product and reference a serialization flaw in versions prior to 8.2.0. The supplied documents do not provide root-cause details, exploit information, impact specifics, o...
CVE-2017-14036
CVE-2017-14036 corresponds to a Cross-Site Scripting (XSS) vulnerability in CrushFTP prior to 7.8.0 and in 8.x prior to 8.2.0. Multiple connected records corroborate the issue in CrushFTP, describing a vulnerability that allows an attacker to inject malicious script or HTML when a user views data...
CVE-2017-14037
CVE-2017-14037 affects CrushFTP before 7.8.0 and 8.x before 8.2.0, described as an HTTP header vulnerability. Public documents confirm the affected versions and nature of the issue across NVD/Red Hat/CNVD entries; exploitation details are not provided in the supplied materials. CVSS data present ...
CVE-2017-14038
The vulnerability CVE-2017-14038 affects CrushFTP server before version 7.8.0 and 8.x before 8.2.0, described as a redirect vulnerability. The connected documents do not provide detailed root cause, technical steps, or explicit exploitation details. Impact is noted in NVD as partial confidentiali...
CVE-2017-14038
CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability...
CVE-2017-14036
CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS...
CVE-2017-14037
CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability...
CrushFTP 7.2.0 - Multiple Vulnerabilities
======================================================== I. Overview ======================================================== Multiple CSRF & Cross-Site Scripting XSS vulnerabilities have been identified in Crushftp 7.2.0 Web Interface on default configuration. These vulnerabilities allows an...
CrushFTP 7.2.0 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities
CrushFTP version 7.2.0 suffers from cross site request forgery and cross site scripting vulnerabilities. ======================================================= I. Overview ======================================================== Multiple CSRF & Cross-Site Scripting XSS vulnerabilities have been...
CrushFTP 7.2.0 Cross Site Request Forgery / Cross Site Scripting
======================================================== I. Overview ======================================================== Multiple CSRF & Cross-Site Scripting XSS vulnerabilities have been identified in Crushftp 7.2.0 Web Interface on default configuration. These vulnerabilities allows an...
CrushFTP HTTP Server Stack Buffer Overflow (PWD)
Exploit for windows platform in category remote exploits $Id: CrushFTPHTTPServer.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information ...