cerberusftp ftp server 2.22 vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server prior to 5.0.5.0 allow remote malicious users to hijack the authentication of administrators for requests that (1) add a user account or (2) reconfigure the state of the FTP ser...

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server prior to 5.0.6.0 allow (1) remote malicious users to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, a...

The default configuration of Cerberus FTP Server prior to 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote malicious users to obtain sensitive information by sniffing the network and performing a brute-force attack on the encrypted data.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook