Skip to content
OpenAdvisories

Vendor

Wing FTP Server

7 known vulnerabilities.

Products

Wing FTP Server 7
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2020-37079

    Wing FTP Server < 6.2.7 - Cross-site Request Forgery

    Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery (CSRF) vulnerability in the web administration interface that allows attackers to delete admin users. Attackers can craft a malicious HTML page with a hidden form to submit a request…

    Wing FTP Server Wing FTP Server
  • Medium 6.1
    CVE-2023-37878

    Insecure Default Permissions in Wing FTP Server <= 7.2.0

    Insecure default permissions in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Server: <= 7.2.0.

    Wing FTP Server Wing FTP Server
  • Medium 6.5
    CVE-2023-37879

    Exposed Session Variable in Wing FTP Server <= 7.2.0

    Insecure storage of sensitive information in Wing FTP Server (User Web Client) allows information elicitation.This issue affects Wing FTP Server: <= 7.2.0.

    Wing FTP Server Wing FTP Server
  • Medium 4.9
    CVE-2023-37881

    Weak Access Control between Domains in Wing FTP Server <= 7.2.0

    Weak access control in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Server: <= 7.2.0.

    Wing FTP Server Wing FTP Server