4 matches found
CVE-2017-14036
CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS.
CVE-2017-14037
CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.
CVE-2017-14038
CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability.
CVE-2017-14035
CrushFTP 8.x before 8.2.0 has a serialization vulnerability.