CVE-2020-37208

CVE-2020-37208 affects SpotFTP 3.0.0.0. A buffer overflow in the registration key input field allows an attacker to crash the application with a 1000-character payload, leading to denial of service. The advisory provides CVSS metrics (4.6/7.5) and notes local/USER-A interaction: CVSSv4.0 indicate...

CVE-2020-37209

SpotFTP 3.0.0.0 contains a denial-of-service vulnerability in the Name field during registration. A crafted 1000-character payload can crash the application, indicating a buffer handling issue in the input for the registration name. The CVSS metrics show mixed assessments: CVSS v3.1 vector AV:N/A...

CVE-2019-25711

CVE-2019-25711 affects SpotFTP Password Recover 2.4.2. The vulnerability is a local, denial-of-service condition caused by accepting an oversized input in the Name field during registration, with a crafted 256-byte payload that crashes the application on submission. Public references (e.g., Explo...