6451 matches found
Xlight FTP Server Authentication SQL Injection
The version of Xlight FTP installed on the remote host is vulnerable to a SQL injection attack during login. This allows an attacker to execute arbitrary SQL commands in the context of the FTP server. Installations that are not using external ODBC authentication are not affected by this...
Serv-U < 8.0.0.1 Multiple Vulnerabilities (DoS, Traversal)
Binary data 4979.prm...
XM Easy Personal FTP Server <= 5.7.0 (NLST) DoS Exploit
No description provided by source. / XM Easy Personnal FTP Server = 5.7.0 Remote Denial of Service with Request NLST --------------------------------------------------------------------------------------------------------- The vulnerability is caused due to an error in handling the NLST command...
XM Easy Personal FTP Server <= 5.7.0 (NLST) DoS Exploit
Exploit for unknown platform in category dos / poc ======================================================= XM Easy Personal FTP Server Syntax : \n",file; fprintfstdout,"=Exemple : %s 127.0.0.1 21 login1 password1\n",file; exit0; int mainint argc, char argv if argc 4 syntaxargv0; int port =...
XM Easy Personal FTP Server 5.7.0 - NLST Denial of Service
XM Easy Personal FTP Server 5.7.0 - NLST Denial of Service / XM Easy Personnal FTP Server Syntax : \n",file; fprintfstdout,"=Exemple : %s 127.0.0.1 21 login1 password1\n",file; exit0; int mainint argc, char argv if argc 4 syntaxargv0; int port = atoiargv2; int mysocket; int mysocket2; int...
XM Easy Personal FTP Server DoS
/ XM Easy Personnal FTP Server Syntax : \n",file; fprintfstdout,"=Exemple : %s 127.0.0.1 21 login1 password1\n",file; exit0; int mainint argc, char argv if argc 4 syntaxargv0; int port = atoiargv2; int mysocket; int mysocket2; int srvconnect; int sockaddrlong; struct sockaddrin sockaddrmysocket;...
Input validation
Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as "&" ampersand in the middle of an argument...
CVE-2008-6534
Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as "&" ampersand in the middle of an argument...
CVE-2008-6534
The CVE-2008-6534 issue affects NULL FTP Server Free and Pro 1.1.0.7. Affected component: the SITE command handling; root cause is an incomplete blacklist that allows shell metacharacters (e.g., & ) to be used in arguments, enabling remote authenticated users to execute arbitrary commands. The vu...
CVE-2008-6534
Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as "&" ampersand in the middle of an argument...
Rhinosoft Serv-U FTP Multiple Vulnerabilities
This host is running Serv-U FTP Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodservuftpservermultvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Rhinosoft Serv-U FTP Multiple Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...
Rhinosoft Serv-U FTP Multiple Vulnerabilities
Serv-U FTP Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Rhinosoft Serv-U FTP Server Version Detection
This script finds the installed Rhinosoft Serv-U FTP Server and saves the version in KB. OpenVAS Vulnerability Test $Id: secpodservuftpserverdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ Rhinosoft Serv-U FTP Server Version Detection Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...
Femitter FTP Server 1.x Traversal / File Manipulation
/ Femitter Server FTP 1.x Multiple Vulnerability ---------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when processing FTP requests. This can be exploited to read, modify, or delete arbitrary files from the affected...
Femitter FTP Server 1.x Multiple Vulnerabilities (post auth)
Exploit for windows platform in category remote exploits ============================================================ Femitter FTP Server 1.x Multiple Vulnerabilities post auth ============================================================ / Femitter Server FTP 1.x Multiple Vulnerability...
Sysax Multi Server 4.3 - Arbitrary Delete Files Expoit
Sysax Multi Server 4.3 - Arbitrary Delete Files Expoit / Sysax Multi Server v4.3 Remote Delete Files. Server FTP. http://www.sysax.com/ ------------------------------------------------------------------------------------- A vulnerability is caused due to an input validation error when handling FT...
Sysax Multi Server 4.3 Remote Arbitrary Delete Files Exploit
Exploit for windows platform in category remote exploits ============================================================ Sysax Multi Server 4.3 Remote Arbitrary Delete Files Exploit ============================================================ / Sysax Multi Server v4.3 Remote Delete Files. Server FTP...
Directory traversal
Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a .. backslash dot dot in an MKD request...
CVE-2009-1031
Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a .. backslash dot dot in an MKD request...
CVE-2009-1031
The CVE-2009-1031 issue affects Rhino Software Serv-U File Server versions 7.0.0.1 through 7.4.0.1. The vulnerability is a directory traversal in the FTP server that allows an unauthenticated remote attacker to create arbitrary directories via a MKD request using a backslash-dot-dot sequence (..)...