Cerberus ftp server vulnerabilities

Latest Cerberus ftp server CVEs

Newest publication first

1. CVE-2007-5930 Cross-site scripting (XSS) vulnerability in the web interface in Cerberus FTP Server before 2.46 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

   Published 2007-11-10

   Medium·CVSS 4.3 EPSS 1.2%

   Cross-site scripting (XSS) vulnerability in the web interface in Cerberus FTP Server before 2.46 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

2. CVE-2003-1476 Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access.

   Published 2007-10-24

   Low·CVSS 2.1 EPSS 0.29%

   Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.