7199 matches found
Xlight FTP Server user参数SQL注入漏洞
BUGTRAQ ID: 34288 Xlight FTP Server是Windows平台下的一款高性能FTP服务器软件。 在执行ODBC认证过程中Xlight FTP Server没有正确地过滤用户所提交的用户名和口令字段，远程攻击者可以用“OR '1'='1' ;”替换用户名绕过认证登录到服务器。 XLight FTP Server XLight FTP Server 3.2.1 厂商补丁： XLight FTP Server ----------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Xlight FTP Server Authentication SQL Injection
The version of Xlight FTP installed on the remote host is vulnerable to a SQL injection attack during login. This allows an attacker to execute arbitrary SQL commands in the context of the FTP server. Installations that are not using external ODBC authentication are not affected by this...
Xlight FTP Server Authentication SQL Injection
Binary data 4981.prm...
Serv-U < 8.0.0.1 Multiple Vulnerabilities (DoS, Traversal)
Binary data 4979.prm...
XM Easy Personal FTP Server <= 5.7.0 (NLST) DoS Exploit
No description provided by source. / XM Easy Personnal FTP Server = 5.7.0 Remote Denial of Service with Request NLST --------------------------------------------------------------------------------------------------------- The vulnerability is caused due to an error in handling the NLST command...
XM Easy Personal FTP Server DoS
/ XM Easy Personnal FTP Server Syntax : \n",file; fprintfstdout,"=Exemple : %s 127.0.0.1 21 login1 password1\n",file; exit0; int mainint argc, char argv if argc 4 syntaxargv0; int port = atoiargv2; int mysocket; int mysocket2; int srvconnect; int sockaddrlong; struct sockaddrin sockaddrmysocket;...
XM Easy Personal FTP Server 5.7.0 - NLST Denial of Service
XM Easy Personal FTP Server 5.7.0 - NLST Denial of Service / XM Easy Personnal FTP Server Syntax : \n",file; fprintfstdout,"=Exemple : %s 127.0.0.1 21 login1 password1\n",file; exit0; int mainint argc, char argv if argc 4 syntaxargv0; int port = atoiargv2; int mysocket; int mysocket2; int...
XM Easy Personal FTP Server <= 5.7.0 (NLST) DoS Exploit
Exploit for unknown platform in category dos / poc ======================================================= XM Easy Personal FTP Server Syntax : \n",file; fprintfstdout,"=Exemple : %s 127.0.0.1 21 login1 password1\n",file; exit0; int mainint argc, char argv if argc 4 syntaxargv0; int port =...
XM Easy Personal FTP Server 5.7.0 NLST DoS
You need a valid login to DoS this FTP server, but even anonymous can do it as long as it has permission to call NLST. Module Options msf use auxiliary/dos/windows/ftp/xmeasy570/nlst msf undefinednlst show actions ...actions... msf undefinednlst set ACTION msf undefinednlst show options ...show a...
CVE-2008-6534
Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as "&" ampersand in the middle of an argument...
Input validation
Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as "&" ampersand in the middle of an argument...
CVE-2008-6534
Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as "&" ampersand in the middle of an argument...
CVE-2008-6534
The CVE-2008-6534 issue affects NULL FTP Server Free and Pro 1.1.0.7. Affected component: the SITE command handling; root cause is an incomplete blacklist that allows shell metacharacters (e.g., & ) to be used in arguments, enabling remote authenticated users to execute arbitrary commands. The vu...
Rhinosoft Serv-U FTP Multiple Vulnerabilities
Serv-U FTP Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Rhinosoft Serv-U FTP Server Version Detection
This script finds the installed Rhinosoft Serv-U FTP Server and saves the version in KB. OpenVAS Vulnerability Test $Id: secpodservuftpserverdetect.nasl 5372 2017-02-20 16:26:11Z cfi $ Rhinosoft Serv-U FTP Server Version Detection Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...
Rhinosoft Serv-U FTP Multiple Vulnerabilities
This host is running Serv-U FTP Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodservuftpservermultvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ Rhinosoft Serv-U FTP Multiple Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...
CVE-2008-6534: Improper Input Validation
Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as "&" ampersand in the middle of an argument...
Femitter FTP Server 1.x Traversal / File Manipulation
/ Femitter Server FTP 1.x Multiple Vulnerability ---------------------------------------------------- Arbitrary: ---------- The vulnerability is caused due to an input validation error when processing FTP requests. This can be exploited to read, modify, or delete arbitrary files from the affected...
Femitter FTP Server 1.x Multiple Vulnerabilities (post auth)
Exploit for windows platform in category remote exploits ============================================================ Femitter FTP Server 1.x Multiple Vulnerabilities post auth ============================================================ / Femitter Server FTP 1.x Multiple Vulnerability...
Sysax Multi Server 4.3 Remote Arbitrary Delete Files Exploit
Exploit for windows platform in category remote exploits ============================================================ Sysax Multi Server 4.3 Remote Arbitrary Delete Files Exploit ============================================================ / Sysax Multi Server v4.3 Remote Delete Files. Server FTP...