FtpLocate 2.02 Cross Site Scripting Vulnerability

FtpLocate version 2.02 suffers from a persistent cross site scripting vulnerability. Exploit Title: FtpLocate 2.02 Persistent XSS Date: 2013/6/23 Exploit Author: Chako Firmware Version: 2.02 Tested on: Windows 7 Vendor Homepage: http://turtle.ee.ncku.edu.tw/ftplocate/readme.english.html...

FtpLocate 2.02 Cross Site Scripting

Exploit Title: FtpLocate 2.02 Persistent XSS Date: 2013/6/23 Exploit Author: Chako Firmware Version: 2.02 Tested on: Windows 7 Vendor Homepage: http://turtle.ee.ncku.edu.tw/ftplocate/readme.english.html http://www.freshports.org/ftp/ftplocate/ File Download:...

CVE-2005-2420

flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP GET request...

CVE-2005-2420

CVE-2005-2420 affects FtpLocate 2.02 (flsearch.pl) and allows remote command execution by injecting shell metacharacters through HTTP GET. Connected Nessus plugin NASL confirms a remote file inclusion style input manipulation via the fsite parameter, enabling arbitrary command execution on the af...