Skip to content
OpenAdvisories

Vendor

NetWin

3 known vulnerabilities.

Products

SurgeMail 1 SurgeFTP 1 NetWin 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2012-10028 Public exploit

    Netwin SurgeFTP <= v23c8 Authenticated RCE

    Netwin SurgeFTP version 23c8 and prior contains a vulnerability in its web-based administrative console that allows authenticated users to execute arbitrary system commands via crafted POST requests to `surgeftpmgr.cgi`. This can lead to full remote code exec…

    NetWin SurgeFTP