CVE-2011-3713

cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/sessioncheck.php and certain other files...

CVE-2011-3713

cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/sessioncheck.php and certain other files...

CVE-2011-3713

CVE-2011-3713 concerns cFTP r80 where a direct request to a PHP file (e.g., templates/session_check.php and similar) can disclose the installation path via an error message, enabling information disclosure. The available documents identify the vulnerable component as part of cFTP r80 and describe...

cFTP 0.1 - r80 Arbitrary File Upload

cFTP 0.1 - r80 Arbitrary File Upload Software Link: https://code.google.com/p/clients-oriented-ftp/downloads/list Version: 0.1 Tested on: linux // Vulnerable URL $url = 'http://url domain/cFTP/'; // The file to upload $filename = dirnameFILE.'/info.php'; $failext = array'php', 'pl'; $username =...