CVE-2025-63420

CVE-2025-63420 CrushFTP11 11.3.757 이전 버전은 CrushFTP 관리자 패널보고서 / "Who Created Folder"에서 저장형 HTML 주입 취약점을 가지고 있으며, 이를 통해 관리자 세션에서 지속적인 HTML 실행이 가능합니다. CWE CWE-79 — 웹 페이지 생성 시 입력 값 부적절한 무효화 크로스사이트 스크립팅 CVSS v3.1 기본 점수: 4.1 보통 root@kitploit: AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N 해결된 버전 공급업체 변경 로그...

Exploit for CVE-2025-63420

CVE-2025-63420 CrushFTP11 before 11.3.757 is vulnerable to s...

CVE-2025-63420

CrushFTP11 before 11.3.757 is vulnerable to stored HTML injection in the CrushFTP Admin Panel Reports / "Who Created Folder", enabling persistent HTML execution in admin sessions...

CVE-2025-63420

CrushFTP11 before 11.3.757 is vulnerable to stored HTML injection in the CrushFTP Admin Panel Reports / "Who Created Folder", enabling persistent HTML execution in admin sessions...

CrushFTP 安全漏洞

CrushFTP is a file transfer server from CrushFTP, Inc. A security vulnerability exists in CrushFTP version 11.3.750, which stems from the Reports/Who Created Folder feature in the Admin Panel not handling input correctly, which could lead to a stored cross-site scripting attack...