Description
loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wftpserver | Wing FTP Server | < 7.4.4 | 7.4.4 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Wing FTP Server <= 7.4.3 - Path Disclosure via Overlong UID Cookie http/cves/2025/CVE-2025-47813.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.