CVE-2012-10028: Improper Neutralization of Special Elements used in an OS Command

Netwin SurgeFTP version 23c8 and prior contains a vulnerability in its web-based administrative console that allows authenticated users to execute arbitrary system commands via crafted POST requests to surgeftpmgr.cgi. This can lead to full remote code execution on the underlying system...

PT-2015-5571

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirCard versions 760S, 762S, and 763S Description The issue concerns a CRLF injection vulnerability in the export.cfg file within the web-based administrative console. This vulnerability allows remote attackers to inject...

Netwin SurgeFTP Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Netwin SurgeFTP...