CVE-2010-2073

authdbconfig.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the 1 test, 2 user, and 3 roxon accounts, which allows remote attackers to read arbitrary files from the FTP server...

Titan FTP XCRC Directory Traversal Information Disclosure

This module exploits a directory traversal vulnerability in the XCRC command implemented in versions of Titan FTP up to and including 8.10.1125. By making sending multiple XCRC command, it is possible to disclose the contents of any file on the drive with a simple CRC "brute force" attack. Althou...

Core FTP Server multiple security vulnerabilities

Multiple buffer overflows, directory traversals, DoS conditions...

BFTPD 2.x匿名账号绕过ROOTDIR安全限制漏洞

BUGTRAQ ID: 40540 Bftpd是一款小型的FTP服务器。 bftpd处理匿名登录时可能会忽略配置文件中所指定的ROOTDIR选项，允许用户绕过限制获得对系统上任意文件或目录的读写访问。 BFTPD 2.x 厂商补丁： BFTPD ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://bftpd.sourceforge.net/news.html...

Wing FTP Server 3.5 admin_loginok.html页面HTML注入漏洞

BUGTRAQ: 40510 Wing FTP server的Administrator控制台（http://x.x.x.x:5466/adminloginok.html ）没有正确地过滤用户所提交请求中的参数，远程攻击者可以通过提交POST请求执行存储式跨站脚本攻击。 Wing FTP Server 3.5 厂商补丁： wftpserver.com -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.wftpserver.com/index.htm...

FileCopa FTP Server Directory Traversal Vulnerability

FileCopa FTP Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FileCopa FTP Server Directory Traversal Vulnerability

This host is running FileCopa FTP Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbfilecopadirectorytraversalvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ FileCopa FTP Server Directory Traversal Vulnerability Authors: Veerendra GG Copyright: Copyright c...

Wing FTP Server 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie- based authentication credentials an...

Quick n Easy FTP Server Lite 3.1 - Denial of Service

Quick n Easy FTP Server Lite 3.1 - Denial of Service !/usr/bin/python print "\n" print " Team Hackers Garage " print " Quick 'n Easy FTP Server Lite Version 3.1 " print " Crash PoC " print " Sumit Sharma aka b0nd " print " [email protected] " print " " print " Special Thanks to: DoubleZero "...

Wing FTP Server - Cross Site Scripting Vulnerability

Security Advisory: Wing FTP Server - Cross Site Scripting Vulnerability ======================================================== Discovered Date: May 31, 2010 System affected: Wing FTP Server for Windows, Version 3.5.0 and prior version Vulnerability Description: ================== Wing FTP serve...

Wing FTP Server crossite scripting

Crossite scripting in administration interface...

Quick 'n Easy FTP Server Lite Version 3.1 Crash PoC

Exploit for windows platform in category dos / poc =================================================== Quick 'n Easy FTP Server Lite Version 3.1 Crash PoC =================================================== !/usr/bin/python print "\n" print " Team Hackers Garage " print " Quick 'n Easy FTP Server...

Quick 'n Easy FTP Server Lite 3.1 - Denial of Service

!/usr/bin/python print "\n" print " Team Hackers Garage " print " Quick 'n Easy FTP Server Lite Version 3.1 " print " Crash PoC " print " Sumit Sharma aka b0nd " print " [email protected] " print " " print " Special Thanks to: DoubleZero " print " http://www.exploit-db.com/author/DouBleZer0 "...

Wing FTP Server <= 3.5.0 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

XFTP 3.0 Build 02.39 Long Filename Buffer Overflow

!/usr/bin/python import socket import sys """ |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...

Core FTP Server Directory Traversal Vulnerability

Core FTP Server is prone to a directory traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Core FTP Server Directory Traversal Vulnerability

Core FTP Server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user- supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching...

Home FTP Server 1.10.3 (build 144) - Denial of Service

Home FTP Server 1.10.3 build 144 - Denial of Service !/usr/bin/python HomeFTP Server r1.10.3 build 144 Denial of Service Exploit Found By: DrIDE Date: May 28, 2010 Download: http://downstairs.dnsalias.net/products.html Tested: Windows 7 import socket, sys host = sys.argv1 buff = "A" 5000 cmds =...

Home FTP Server 1.10.2.143 Directory Traversal

============================================================================================================ //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

Core FTP Server 1.0.343 - Directory Traversal

source: https://www.securityfocus.com/bid/40422/info Core FTP Server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the context of the...