Advisories · Technology
Wing FTP Server.
Every CVE that names Wing FTP Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Wing FTP Server < 8.1.3 Authenticated Remote Code Execution via Session Serialization
- Wing FTP Server
- Code injection
- CVSS 5.1 Medium
Wing FTP Server < 6.2.7 - Cross-site Request Forgery
- Wing FTP Server
- Cross-site request forgery (CSRF)
- CVSS 8.6 High
Wing FTP Server 6.3.8 - Remote Code Execution
- Wing FTP Server
- Command injection
- CVSS 7.5 High
Wing FTP Server Lua Admin Console unnecessary privileges
- Wing FTP Server
- Privilege escalation
- CVSS 3.0 Low
Cross-Site Scripting Vulnerability in Wing FTP Server <= 7.2.0
- Wing FTP Server
- CWE-116
- CVSS 6.1 Medium
Insecure Default Permissions in Wing FTP Server <= 7.2.0
- Wing FTP Server
- Broken access control
- CVSS 6.5 Medium
Exposed Session Variable in Wing FTP Server <= 7.2.0
- Wing FTP Server
- Information disclosure
- CVSS 4.9 Medium
Weak Access Control between Domains in Wing FTP Server <= 7.2.0
- Wing FTP Server
- Broken access control