Lucene search
+L

12 matches found

NVD
NVD
•added 2023/09/12 9:15 a.m.•45 views

CVE-2023-37879

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

7.5CVSS6.6AI score0.0053EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/09/12 9:15 a.m.•16 views

CVE-2023-37879

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

7.5CVSS5.8AI score0.0053EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/09/12 9:15 a.m.•18 views

CVE-2023-37875

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

5.4CVSS5.8AI score0.00292EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/12 9:15 a.m.•42 views

Information disclosure

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

5CVSS7.4AI score0.0053EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/09/12 8:15 a.m.•52 views

CVE-2023-37879 Exposed Session Variable in Wing FTP Server <= 7.2.0

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

6.5CVSS7.6AI score0.0053EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/12 8:15 a.m.•156 views

CVE-2023-37879

CVE-2023-37879 affects Wing FTP Server (User Web Client) up to version 7.2.0, where insecure storage of sensitive information enables information elicitation. Multiple sources confirm the issue as a sensitive-info disclosure via the User Web Client, with impact on confidentiality and no indicatio...

7.5CVSS6.6AI score0.0053EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/12 12:00 a.m.•7 views

CVE-2023-37879: Insecure Storage of Sensitive Information

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

7.5CVSS7.3AI score0.0053EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/09/12 12:00 a.m.•6 views

PT-2023-26154

Name of the Vulnerable Software and Affected Versions Wing FTP Server versions = 7.2.0 Description The issue is related to improper encoding or escaping of output in the User Web Client of Wing FTP Server, allowing Cross-Site Scripting XSS. Recommendations For versions = 7.2.0, update to a versio...

5.4CVSS5.7AI score0.00292EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/09/12 12:00 a.m.•18 views

PT-2023-26156 · Unknown · Wing Ftp Server

Name of the Vulnerable Software and Affected Versions: Wing FTP Server versions = 7.2.0 Description: The issue is related to insecure storage of sensitive information in the User Web Client of Wing FTP Server, allowing information elicitation. Recommendations: For versions = 7.2.0, update to a...

7.5CVSS7.2AI score0.0053EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/12 12:00 a.m.•9 views

CVE-2023-37875: Improper Encoding or Escaping of Output

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

5.4CVSS6AI score0.00292EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/09/12 12:00 a.m.•22 views

Wing FTP Server Security Vulnerability

Wing FTP Server is a cross-platform FTP server software. A security vulnerability exists in Wing FTP Server 7.2.0 and prior versions, which stems from an incorrect output encoding of the User Web Client, resulting in a cross-site scripting XSS vulnerability...

5.4CVSS5.9AI score0.00292EPSS
SaveExploits0References2
exploitpack
exploitpack
•added 2002/09/25 12:00 a.m.•22 views

ACWeb 1.141.8 - Cross-Site Scripting

ACWeb 1.141.8 - Cross-Site Scripting source: https://www.securityfocus.com/bid/5793/info acWEB is prone to cross-site scripting attacks. It is possible to construct a malicious link to the web server which contains arbitrary script code. When the link is visited, the script code will be executed ...

SaveExploits0
Rows per page
Query Builder