154 matches found
PT-2020-12794
Name of the Vulnerable Software and Affected Versions ProVide formerly zFTPServer versions through 13.1 Description An issue was discovered where the software does not enforce permission over Windows Symlinks or Junctions. This allows a low-privileged user to craft a Junction Link in a directory...
PT-2020-12789
Name of the Vulnerable Software and Affected Versions ProVide formerly zFTPServer versions through 13.1 Description An issue was discovered in the User Web Interface, which has multiple stored and reflected XSS issues. The Collaborate feature is reflected via the filename parameter and stored via...
PT-2020-12795
Name of the Vulnerable Software and Affected Versions ProVide formerly zFTPServer versions through 13.1 Description An issue in the software allows for privilege escalation via the "/ajax/SetUserInfo" API endpoint, specifically through the messages parameter. This is due to the EXECUTE feature,...
PT-2020-12791
Name of the Vulnerable Software and Affected Versions ProVide formerly zFTPServer versions through 13.1 Description The issue concerns Multiple Stored and Reflected XSS in the Admin Web Interface. Specifically, GetInheritedProperties is reflected via the groups parameter, GetUserInfo is reflected...
CVE-2020-11704: Improper Neutralization of Input During Web Page Generation
An issue was discovered in ProVide formerly zFTPServer through 13.1. The Admin Web Interface has Multiple Stored and Reflected XSS. GetInheritedProperties is Reflected via the groups parameter. GetUserInfo is Reflected via POST data. SetUserInfo is Stored via the general parameter...
CVE-2020-11701: Cross-Site Request Forgery (CSRF)
An issue was discovered in ProVide formerly zFTPServer through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting files and directories...
CVE-2020-11703: Improper Neutralization of Special Elements in Output Used by a Downstream Component
An issue was discovered in ProVide formerly zFTPServer through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the language parameter...
CVE-2020-11705: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in ProVide formerly zFTPServer through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in .pfx format or overwrite arbitrary files via the fileName parameter...
CVE-2020-11707: Incorrect Authorization
An issue was discovered in ProVide formerly zFTPServer through 13.1. It doesn't enforce permission over Windows Symlinks or Junctions. As a result, a low-privileged user non-admin can craft a Junction Link in a directory he has full control of, breaking out of the sandbox...
CVE-2020-11708: Improper Privilege Management
An issue was discovered in ProVide formerly zFTPServer through 13.1. Privilege escalation can occur via the /ajax/SetUserInfo messages parameter because of the EXECUTE feature, which is for executing programs when certain events are triggered...
CVE-2020-11702: Improper Neutralization of Input During Web Page Generation
An issue was discovered in ProVide formerly zFTPServer through 13.1. The User Web Interface has Multiple Stored and Reflected XSS issues. Collaborate is Reflected via the filename parameter. Collaborate is Stored via the displayname parameter. Deletemultiple is Reflected via the files parameter...
CVE-2020-11706: Cross-Site Request Forgery (CSRF)
An issue was discovered in ProVide formerly zFTPServer through 13.1. The Admin Interface allows CSRF for actions such as: Change any username and password, admin ones included; Create/Delete users; Enable/Disable Services; Set a rogue update proxy; and Shutdown the server...
