ftp vulnerabilities

Products

• ftp 2
• admin 1
• ftp pasv 1

Latest ftp CVEs

Newest publication first

1. CVE-2007-6232 Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action.

   Published 2007-12-04

   Medium·CVSS 4.3 EPSS 1.6%

   Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action.

2. CVE-1999-0351 FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port that was intended for use by a client.

   Published 1999-09-29

   Medium·CVSS 6.4 EPSS 1.6%

   FTP PASV "Pizza Thief" denial of service and unauthorized data access. Attackers can steal data by connecting to a port that was intended for use by a client.

3. CVE-1999-0201 A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.

   Published 1999-09-29

   Medium·CVSS 6.4 EPSS 6.2%

   A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user.

4. CVE-1999-0082 CWD ~root command in ftpd allows root access.

   Published 1999-09-29

   High·CVSS 10.0 EPSS 8.3%

   CWD ~root command in ftpd allows root access.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.