Wing FTP Server Information Disclosure Vulnerabilities

No description provided by source. Some vulnerabilities have been reported in Wing FTP Server, which can be exploited by malicious users and malicious people to disclose potentially sensitive information. 1 Input passed to the Web Client is not properly sanitised before being used. This can be...

Wing FTP Server < 3.4.1 Multiple Information Disclosure Vulnerabilities

Wing FTP Server is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Argosoft FTP Server .NET 1.0.2.1 Path Traversal

Exploit Title: Argosoft FTP SERVER .NET Version pwd 257 "/" is working directory //i'm standing on the ftp root directory ftp dir 200 Port command successful 150 Opening ASCII data connection drw-r--r-- 1 user group 0 Apr 26 18:29 tesstdir -rw-r--r-- 1 user group 0 Apr 26 18:29 testfile.txt 226...

Sql injection

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the 1 USER aka username or 2 PASS aka password command...

CVE-2009-4795

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the 1 USER aka username or 2 PASS aka password command...

CVE-2009-4795

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the 1 USER aka username or 2 PASS aka password command...

CVE-2009-4795

CVE-2009-4795 : In Xlight FTP Server prior to 3.2.1, when ODBC authentication is enabled, remote attackers can trigger SQL injection through the USER (username) or PASS (password) commands. The underlying issue is the server processing user-supplied credentials in SQL without proper validation, a...

CVE-2009-4769

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...

CVE-2009-4770

The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access...

Format string

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...

Default credentials

The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access...

CVE-2009-4769

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...

CVE-2009-4770

The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access...

CVE-2009-4769

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...

CVE-2009-4770

The CVE-2009-4770 entry affects httpdx FTP server component versions 1.4, 1.4.5, 1.4.6, 1.4.6b and 1.5, where a default moderator password (pass123) enables remote attackers to obtain privileged access. The accompanying sources in the connected set confirm the exact default credential outcome but...

XM Easy Personal FTP Server LIST Denial Of Service

Exploit Title: XM Easy Personal FTP Server LIST Date: 4/17/2010 Author: Jeremiah Talamantes Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP, SP2 CVE : N/A Code : http://www.redteamsecure.com/assets/company/exploits/xmftp/xmexploit.php...

Trellian FTP Client PASV Buffer Overflow

Exploit Title: Trellian FTP Client PASV BOF exploit Date: 2010-04-11 Author: zombiefx Software Link: http://www.trellian.com/bin/lu/dl/TrellianFTP.exe Version: Trellian FTP Client v 3.01 Tested on: Windows XP SP3 Usage: ./ftpserver.pl Acts as a fake ftp server that passes the vulnerable PASV...

Trellian FTP Client PASV BOF Exploit

Exploit for windows platform in category remote exploits ==================================== Trellian FTP Client PASV BOF Exploit ==================================== Exploit Title: Trellian FTP Client PASV BOF exploit Date: 2010-04-11 Author: zombiefx Software Link:...

Microsoft Windows FTP Server 1.4 - Authentication Bypass

Microsoft Windows FTP Server 1.4 - Authentication Bypass Exploit Title: WINDOWS FTP SERVER by DWG Auth Bypass Date: April 09, 2010 Software Link: http://www.windowsftpserver.com/freedownload.html Version: v 1.4 Tested on: Windows XP SP3 Author: chap0 Email: chap0x90atgmaildotcom Site:...

WINDOWS FTP SERVER by DWG (Auth Bypass)

Exploit for windows platform in category remote exploits ======================================= WINDOWS FTP SERVER by DWG Auth Bypass ======================================= Exploit Title: WINDOWS FTP SERVER by DWG Auth Bypass Date: April 09, 2010 Software Link:...