Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:33 a.m.4 views

CVE-2019-16116

EnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in the Bootstrap.log file. This allows an attacker to obtain the administrator password hash...

4.3CVSS6.5AI score0.03009EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:32 a.m.5 views

CVE-2019-16864

CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM...

8.8CVSS7.8AI score0.26821EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:29 p.m.7 views

CVE-2022-2560

This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...

9.1CVSS6.5AI score0.31921EPSS
Exploits0References1
NVD
NVD
added 2023/03/29 7:15 p.m.11 views

CVE-2022-2560

This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...

9.1CVSS8.4AI score0.31921EPSS
Exploits0References1
Prion
Prion
added 2023/03/29 7:15 p.m.15 views

Design/Logic Flaw

This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...

6.4CVSS9.1AI score0.31921EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/03/29 12:0 a.m.11 views

CVE-2022-2560

This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...

8.2CVSS9.3AI score0.31921EPSS
Exploits0References1
CVE
CVE
added 2023/03/29 12:0 a.m.33 views

CVE-2022-2560

CVE-2022-2560 affects EnterpriseDT CompleteFTP Server (version 22.1.0) with a flaw in the HttpFile class that fails to validate a user-supplied path before file operations. This allows remote attackers to delete arbitrary files with SYSTEM privileges and no authentication. Multiple connected sour...

9.1CVSS8.3AI score0.31921EPSS
Exploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/07/28 12:0 a.m.33 views

EnterpriseDT CompleteFTP Server HttpFile Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper validation...

8.2CVSS1.1AI score0.31921EPSS
Exploits0
NVD
NVD
added 2022/02/14 8:15 p.m.8 views

CVE-2019-16864

CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM...

8.8CVSS0.26821EPSS
Exploits1References2
Prion
Prion
added 2022/02/14 8:15 p.m.17 views

Remote code execution

CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as SYSTEM...

8.5CVSS8.9AI score0.26821EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2022/02/14 7:51 p.m.51 views

CVE-2019-16864

Affected product: EnterpriseDT CompleteFTP Server. Vulnerable if running CompleteFTP before 12.1.4; RCE via SSH: CompleteFTPService.exe executes the attacker’s command as SYSTEM, triggered by a Windows user with SSH access. Impact: remote code execution without user interaction. Remediation: upgr...

8.8CVSS8.9AI score0.26821EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2019/10/02 3:29 p.m.64 views

CVE-2019-16116

CVE-2019-16116 affects EnterpriseDT CompleteFTP Server prior to version 12.1.3, where the Bootstrap.log file could leak the administrator password hash. Public sources describe a path where installation logging obscures the password, enabling an attacker to obtain credentials if remote administra...

4.3CVSS4.4AI score0.03009EPSS
Exploits2References2Affected Software1
securityvulns
securityvulns
added 2010/05/26 12:0 a.m.28 views

CompleteFTP Server v 4.x "PORT" command Remote DOS exploit

------------------------------------------------------------------------ CompleteFTP Server v 4.x "PORT" command Remote DOS exploit ------------------------------------------------------------------------ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 ...

1.2AI score
Exploits0
Packet Storm
Packet Storm
added 2010/05/22 12:0 a.m.19 views

CompleteFTP Server 3.3.x PORT Denial Of Service

------------------------------------------------------------------------ CompleteFTP Server v 3.3.x "PORT" command Remote DOS exploit ------------------------------------------------------------------------ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

0.1AI score
Exploits0
Rows per page
Query Builder