CVE-2018-25226

FTPShell Server 6.83 is affected by a buffer overflow in the account name field of the Manage FTP Accounts interface. A 417-byte payload pasted into the Account name to ban parameter can trigger a denial of service, allowing a local attacker to crash the application. The advisory notes a local at...

CVE-2019-25619

The CVE-2019-25619 case affects FTP Shell Server 6.83. A buffer overflow is triggered in the 'Account name to ban' field, enabling local attackers to execute arbitrary code by supplying a crafted string. The account name parameter in the Manage FTP Accounts dialog can be used to inject shellcode ...