Lucene search
+L

11 matches found

NVD
NVD
•added 2023/09/12 9:15 a.m.•40 views

CVE-2023-37879

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

7.5CVSS6.6AI score0.0053EPSS
SaveExploits0References1
OSV
OSV
•added 2023/09/12 9:15 a.m.•11 views

CVE-2023-37879

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

7.5CVSS5.8AI score0.0053EPSS
SaveExploits0References1
OSV
OSV
•added 2023/09/12 9:15 a.m.•10 views

CVE-2023-37875

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

5.4CVSS5.8AI score0.00292EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/12 9:15 a.m.•35 views

Information disclosure

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

5CVSS7.4AI score0.0053EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/09/12 8:15 a.m.•44 views

CVE-2023-37879 Exposed Session Variable in Wing FTP Server <= 7.2.0

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

6.5CVSS7.6AI score0.0053EPSS
SaveExploits0References1
CVE
CVE
•added 2023/09/12 8:15 a.m.•147 views

CVE-2023-37879

CVE-2023-37879 affects Wing FTP Server (User Web Client) up to version 7.2.0, where insecure storage of sensitive information enables information elicitation. Multiple sources confirm the issue as a sensitive-info disclosure via the User Web Client, with impact on confidentiality and no indicatio...

7.5CVSS6.6AI score0.0053EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/12 12:00 a.m.•0 views

CVE-2023-37875: Improper Encoding or Escaping of Output

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

5.4CVSS6AI score0.00292EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/12 12:00 a.m.•0 views

CVE-2023-37879: Insecure Storage of Sensitive Information

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

7.5CVSS7.3AI score0.0053EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/09/12 12:00 a.m.•13 views

Wing FTP Server Security Vulnerability

Wing FTP Server is a cross-platform FTP server software. A security vulnerability exists in Wing FTP Server 7.2.0 and prior versions, which stems from an incorrect output encoding of the User Web Client, resulting in a cross-site scripting XSS vulnerability...

5.4CVSS5.9AI score0.00292EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/09/12 12:00 a.m.•14 views

PT-2023-26156 · Unknown · Wing Ftp Server

Name of the Vulnerable Software and Affected Versions: Wing FTP Server versions = 7.2.0 Description: The issue is related to insecure storage of sensitive information in the User Web Client of Wing FTP Server, allowing information elicitation. Recommendations: For versions = 7.2.0, update to a...

7.5CVSS7.2AI score0.0053EPSS
SaveExploits0References5
exploitpack
exploitpack
•added 2002/09/25 12:00 a.m.•19 views

ACWeb 1.141.8 - Cross-Site Scripting

ACWeb 1.141.8 - Cross-Site Scripting source: https://www.securityfocus.com/bid/5793/info acWEB is prone to cross-site scripting attacks. It is possible to construct a malicious link to the web server which contains arbitrary script code. When the link is visited, the script code will be executed ...

SaveExploits0
Rows per page
Query Builder