35 matches found
CVE-2022-31827
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery SSRF via the function performFetchRequest at HTTPFetcher.php...
CVE-2022-27468
Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to execute arbitrary code via a crafted file uploaded to the web server...
CVE-2022-27469
Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery SSRF...
EUVD-2022-31970
Malicious code in bioql PyPI...
EUVD-2022-31971
Malicious code in bioql PyPI...
EUVD-2022-53200
Malicious code in bioql PyPI...
Monsta FTP < 2.10.2 Multiple Vulnerabilities
Monsta FTP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:monstaftp:monstaftp"; if...
Monsta FTP <= 2.10.4 Multiple Vulnerabilities
Monsta FTP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:monstaftp:monstaftp"; if...
CVE-2022-31827
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery SSRF via the function performFetchRequest at HTTPFetcher.php...
CVE-2022-31827
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery SSRF via the function performFetchRequest at HTTPFetcher.php...
CVE-2022-31827
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery SSRF via the function performFetchRequest at HTTPFetcher.php...
Server side request forgery (ssrf)
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery SSRF via the function performFetchRequest at HTTPFetcher.php...
CVE-2022-31827
CVE-2022-31827 affects MonstaFTP v2.10.3, with a Server-Side Request Forgery (SSRF) via the function performFetchRequest in HTTPFetcher.php . The vulnerability description across sources consistently identifies SSRF as the issue; related entries (NVD, Red Hat, PRION, CVE lists) corroborate this a...
CVE-2022-31827
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery SSRF via the function performFetchRequest at HTTPFetcher.php...
CVE-2022-31827: Server-Side Request Forgery (SSRF)
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery SSRF via the function performFetchRequest at HTTPFetcher.php...
PT-2022-20950
Name of the Vulnerable Software and Affected Versions MonstaFTP version 2.10.3 Description The issue is related to a Server-Side Request Forgery SSRF that can be exploited via the performFetchRequest function at HTTPFetcher.php. This allows for potential unauthorized access to internal resources...
Monstaftp server-side request forgery vulnerability
Monstaftp is a modern Web interface for FTP. version v2.10.3 of Monstaftp is vulnerable to server-side request forgery, which stems from the product's failure to properly validate user input and can be exploited by attackers to probe server intranet resources...
Monstaftp arbitrary file upload vulnerability
Monstaftp is a modern Web interface for FTP. version v2.10.3 of Monstaftp is vulnerable to an arbitrary file upload vulnerability, which stems from the application's lack of valid validation of uploaded files. An attacker could exploit this vulnerability to execute arbitrary code via a crafted fi...