Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
entifier of the patch is 3e693197bd69b7173cc16d8d2e0a7d501a2a0b06. It is recommended to upgrade the affected component. The identifier VDB-222609 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222609 - https://vuldb.com/?ctiid.222609 - https://github.com/wp-plugins/a-forms/commit/3e693197bd69b7173cc16d8d2e0a7d501a2a0b06
CVE ID: CVE-2013-10021 State: PUBLISHED Published: 2023-03-11T20:31:02.866Z Last Updated: 2024-08-06T18:09:17.006Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: dd32 Products: Debug Bar Plugin Problem Types: CWE-79 Description: A vulnerability was found in dd32 Debug Bar Plugin up to 0.8 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function render of the file panels/class-debug-bar-queries.php. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 0.8.1 is able to address this issue. The patch is named 0842af8f8a556bc3e39b9ef758173b0a8a9ccbfc. It is recommended to upgrade the affected
dress this issue. The patch is named 0842af8f8a556bc3e39b9ef758173b0a8a9ccbfc. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222739. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222739 - https://vuldb.com/?ctiid.222739 - https://github.com/dd32/debug-bar/commit/0842af8f8a556bc3e39b9ef758173b0a8a9ccbfc - https://github.com/dd32/debug-bar/releases/tag/0.8.1
CVE ID: CVE-2013-10022 State: PUBLISHED Published: 2023-04-05T12:31:03.375Z Last Updated: 2024-08-06T18:09:17.085Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: BestWebSoft Products: Contact Form Plugin Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress. Affected by this issue is the function cntctfrm_display_form/cntctfrm_check_form of the file contact_form.php. The manipulation leads to cross site scripting. The attack may be launched remotely. Upgrading to version 3.52 is able to address this issue. The patch is identified as 642ef1dc1751ab6642ce981fe126325bb574f898. It i
to version 3.52 is able to address this issue. The patch is identified as 642ef1dc1751ab6642ce981fe126325bb574f898. It is recommended to upgrade the affected component. VDB-225002 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225002 - https://vuldb.com/?ctiid.225002 - https://github.com/wp-plugins/contact-form-plugin/commit/642ef1dc1751ab6642ce981fe126325bb574f898
CVE ID: CVE-2013-10023 State: PUBLISHED Published: 2023-04-08T09:00:05.198Z Last Updated: 2024-08-06T18:09:16.986Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Editorial Calendar Plugin Problem Types: CWE-89 Description: A vulnerability was found in Editorial Calendar Plugin up to 2.6 on WordPress. It has been declared as critical. Affected by this vulnerability is the function edcal_filter_where of the file edcal.php. The manipulation of the argument edcal_startDate/edcal_endDate leads to sql injection. The attack can be launched remotely. Upgrading to version 2.7 is able to address this issue. The patch is named a9277f13781187daee760b4dfd052b1b68e101cc. It is
rading to version 2.7 is able to address this issue. The patch is named a9277f13781187daee760b4dfd052b1b68e101cc. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-225151. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225151 - https://vuldb.com/?ctiid.225151 - https://github.com/wp-plugins/editorial-calendar/commit/a9277f13781187daee760b4dfd052b1b68e101cc - https://github.com/wp-plugins/editorial-calendar/releases/tag/2.7
CVE ID: CVE-2013-10024 State: PUBLISHED Published: 2023-04-08T17:00:05.255Z Last Updated: 2025-02-07T19:38:30.560Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:P/I:N/A:N) Vendors: n/a Products: Exit Strategy Plugin Problem Types: CWE-200 Description: A vulnerability has been found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality of the file exitpage.php. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 1.59 is able to address this issue. The identifier of the patch is d964b8e961b2634158719f3328f16eda16ce93ac. It is recommended to upgrade the affected compone
e identifier of the patch is d964b8e961b2634158719f3328f16eda16ce93ac. It is recommended to upgrade the affected component. The identifier VDB-225265 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.225265 - https://vuldb.com/?ctiid.225265 - https://github.com/wp-plugins/exit-strategy/commit/d964b8e961b2634158719f3328f16eda16ce93ac
CVE ID: CVE-2013-10025 State: PUBLISHED Published: 2023-04-08T17:00:06.527Z Last Updated: 2024-08-06T18:09:17.148Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: Exit Strategy Plugin Problem Types: CWE-352 Description: A vulnerability was found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this issue is the function exitpageadmin of the file exitpage.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. Upgrading to version 1.59 is able to address this issue. The patch is identified as d964b8e961b2634158719f3328f16eda16ce93ac. It is recommended to upgrade the affected component. VDB-225
is identified as d964b8e961b2634158719f3328f16eda16ce93ac. It is recommended to upgrade the affected component. VDB-225266 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.225266 - https://vuldb.com/?ctiid.225266 - https://github.com/wp-plugins/exit-strategy/commit/d964b8e961b2634158719f3328f16eda16ce93ac
CVE ID: CVE-2013-10026 State: PUBLISHED Published: 2023-05-02T02:00:05.594Z Last Updated: 2024-08-06T18:09:17.147Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Mail Subscribe List Plugin Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in Mail Subscribe List Plugin up to 2.0.10 on WordPress. This issue affects some unknown processing of the file index.php. The manipulation of the argument sml_name/sml_email leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2.1 is able to address this issue. The identifier of the patch is 484970ef8285cae51d2de3bd4e4684d33c956c28. It is re
ion 2.1 is able to address this issue. The identifier of the patch is 484970ef8285cae51d2de3bd4e4684d33c956c28. It is recommended to upgrade the affected component. The identifier VDB-227765 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.227765 - https://vuldb.com/?ctiid.227765 - https://github.com/wp-plugins/mail-subscribe-list/commit/484970ef8285cae51d2de3bd4e4684d33c956c28
CVE ID: CVE-2013-10027 State: PUBLISHED Published: 2023-06-04T13:31:03.247Z Last Updated: 2024-08-06T18:09:17.111Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: Blogger Importer Plugin Problem Types: CWE-352 Description: A vulnerability was found in Blogger Importer Plugin up to 0.5 on WordPress. It has been classified as problematic. Affected is the function start/restart of the file blogger-importer.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. Upgrading to version 0.6 is able to address this issue. The patch is identified as b83fa4f862b0f19a54cfee76060ec9c2e7f7ca70. It is recommended to upgrade the affec
this issue. The patch is identified as b83fa4f862b0f19a54cfee76060ec9c2e7f7ca70. It is recommended to upgrade the affected component. VDB-230658 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230658 - https://vuldb.com/?ctiid.230658 - https://github.com/wp-plugins/blogger-importer/commit/b83fa4f862b0f19a54cfee76060ec9c2e7f7ca70
CVE ID: CVE-2013-10028 State: PUBLISHED Published: 2023-06-04T18:31:03.617Z Last Updated: 2024-08-06T18:09:17.116Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: EELV Newsletter Plugin Problem Types: CWE-79 Description: A vulnerability was found in EELV Newsletter Plugin 2.x on WordPress. It has been rated as problematic. Affected by this issue is the function style_newsletter of the file lettreinfo.php. The manipulation of the argument email leads to cross site scripting. The attack may be launched remotely. The name of the patch is 3339b42316c5edf73e56eb209b6a3bb3e868d6ed. It is recommended to upgrade the affected component. The identifier of this vulnerability is
f73e56eb209b6a3bb3e868d6ed. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-230660. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230660 - https://vuldb.com/?ctiid.230660 - https://github.com/wp-plugins/eelv-newsletter/commit/3339b42316c5edf73e56eb209b6a3bb3e868d6ed
CVE ID: CVE-2013-10029 State: PUBLISHED Published: 2023-06-05T21:00:04.685Z Last Updated: 2024-11-22T15:40:24.809Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: n/a Products: Exit Box Lite Plugin Problem Types: CWE-352 Description: A vulnerability classified as problematic was found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this vulnerability is the function exitboxadmin of the file wordpress-exit-box-lite.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. Upgrading to version 1.10 is able to address this issue. The patch is named fad26701addb862c51baf85c6e3cc136aa79c309. It is recommended to upgrade the affected co
ss this issue. The patch is named fad26701addb862c51baf85c6e3cc136aa79c309. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230671. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.230671 - https://vuldb.com/?ctiid.230671 - https://github.com/wp-plugins/wordpress-exit-box-lite/commit/fad26701addb862c51baf85c6e3cc136aa79c309
CVE ID: CVE-2013-10030 State: PUBLISHED Published: 2023-06-05T22:00:03.887Z Last Updated: 2024-08-06T18:09:17.089Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Exit Box Lite Plugin Problem Types: CWE-200 Description: A vulnerability, which was classified as problematic, has been found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this issue is some unknown functionality of the file wordpress-exit-box-lite.php. The manipulation leads to information disclosure. The attack may be launched remotely. Upgrading to version 1.10 is able to address this issue. The name of the patch is fad26701addb862c51baf85c6e3cc136aa79c309. It is rec
version 1.10 is able to address this issue. The name of the patch is fad26701addb862c51baf85c6e3cc136aa79c309. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-230672. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.230672 - https://vuldb.com/?ctiid.230672 - https://github.com/wp-plugins/wordpress-exit-box-lite/commit/fad26701addb862c51baf85c6e3cc136aa79c309
CVE ID: CVE-2013-10032 State: PUBLISHED Published: 2025-07-25T15:51:23.874Z Last Updated: 2025-11-20T22:54:55.366Z Vendors: GetSimple CMS Project Products: GetSimple CMS Problem Types: CWE-434, CWE-306 Description: An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows authenticated users to upload arbitrary files without proper validation of MIME types or extensions. By uploading a .pht file containing PHP code, an attacker can bypass blacklist-based restrictions and place executable code within the web root. A crafted request using a polyglot or disguised extension allows the attacker to execute the payload by
in the web root. A crafted request using a polyglot or disguised extension allows the attacker to execute the payload by accessing the file directly via the web server. This vulnerability exists due to the use of a blacklist for filtering file types instead of a whitelist. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/get_simple_cms_upload_exec.rb - https://www.exploit-db.com/exploits/25405 - https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=27895 - https://www.fortiguard.com/encyclopedia/ips/39295 - https://get-simple.info - https://www.vulncheck.c
etail?asid=27895 - https://www.fortiguard.com/encyclopedia/ips/39295 - https://get-simple.info - https://www.vulncheck.com/advisories/getsimple-cms-auth-rce-via-arbitrary-php-file-upload
CVE ID: CVE-2013-10033 State: PUBLISHED Published: 2025-07-31T14:56:59.144Z Last Updated: 2025-11-20T22:56:32.561Z Vendors: Kimai Project Products: Kimai Problem Types: CWE-89 Description: An unauthenticated SQL injection vulnerability exists in Kimai version 0.9.2.x via the db_restore.php endpoint. The flaw allows attackers to inject arbitrary SQL queries into the dates[] POST parameter, enabling file write via INTO OUTFILE under specific environmental conditions. This can lead to remote code execution by writing a PHP payload to the web-accessible temporary directory. The vulnerability has been confirmed in versions including 0.9.2.beta, 0.9.2.1294.beta, and 0.9.2.1306-3. Additional Analys
vulnerability has been confirmed in versions including 0.9.2.beta, 0.9.2.1294.beta, and 0.9.2.1306-3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/kimai_sqli.rb - https://www.exploit-db.com/exploits/30010 - https://www.exploit-db.com/exploits/25606 - https://vulners.com/metasploit/MSF:EXPLOIT-UNIX-WEBAPP-KIMAI_SQLI- - https://www.vulncheck.com/advisories/kimai-sqli
CVE ID: CVE-2013-10034 State: PUBLISHED Published: 2025-07-31T14:56:30.930Z Last Updated: 2025-07-31T19:22:42.274Z Vendors: Kaseya Products: KServer Problem Types: CWE-434 Description: An unrestricted file upload vulnerability exists in Kaseya KServer versions prior to 6.3.0.2. The uploadImage.asp endpoint allows unauthenticated users to upload files to arbitrary paths via a crafted filename parameter in a multipart/form-data POST request. Due to the lack of authentication and input sanitation, an attacker can upload a file with an .asp extension to a web-accessible directory, which can then be invoked to execute arbitrary code with the privileges of the IUSR account. The vulnerability enabl
ry, which can then be invoked to execute arbitrary code with the privileges of the IUSR account. The vulnerability enables remote code execution without prior authentication and was resolved in version 6.3.0.2 by removing the vulnerable uploadImage.asp endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/kaseya_uploadimage_file_upload.rb - https://web.archive.org/web/20150210113922/http://security-assessment.com/files/documents/advisory/Kaseya%20File%20Upload.pdf - https://www.exploit-db.com/exploits/29675 - https://www.vulncheck.com/advisories/kaseya-arbitrary-file-upload
load.pdf - https://www.exploit-db.com/exploits/29675 - https://www.vulncheck.com/advisories/kaseya-arbitrary-file-upload-rce
CVE ID: CVE-2013-10035 State: PUBLISHED Published: 2025-07-31T15:00:42.257Z Last Updated: 2025-11-20T23:20:49.543Z Vendors: ProcessMaker, Inc. Products: ProcessMaker Open Source Problem Types: CWE-94 Description: A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin. An authenticated user can execute arbitrary PHP code via multiple endpoints, including appFolderAjax.php, casesStartPage_Ajax.php, and cases_SchedulerGetPlugins.php, by supplying crafted POST requests to parameters such as action and params. These endpoints fail to validate user input and directly invoke PHP functions like system() with user-supplied parameters, e
e endpoints fail to validate user input and directly invoke PHP functions like system() with user-supplied parameters, enabling remote code execution. The vulnerability affects both Linux and Windows installations and is present in default configurations of versions including 2.0.23 through 2.5.1. The vulnerable skin cannot be removed through the web interface, and exploitation requires only valid user credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/processmaker_exec.rb - https://web.archive.org/web/20150419043936/https://bugs.processmaker.com/view.php?id=13436 - htt
/processmaker_exec.rb - https://web.archive.org/web/20150419043936/https://bugs.processmaker.com/view.php?id=13436 - https://www.exploit-db.com/exploits/29325 - https://www.fortiguard.com/encyclopedia/ips/37390 - https://www.vulncheck.com/advisories/processmaker-open-source-neoclassic-skin-php-code-execution
CVE ID: CVE-2013-10036 State: PUBLISHED Published: 2025-07-31T14:53:39.747Z Last Updated: 2025-07-31T18:22:42.331Z Vendors: Beetel Teletech Ltd. Products: Connection Manager Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler (SEH), leading to arbitrary code execution when the application processes the file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metaspl
file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/beetel_netconfig_ini_bof.rb - https://www.exploit-db.com/exploits/28969 - https://www.fortiguard.com/encyclopedia/ips/37394/beetel-connection-manager-netconfig-username-buffer-overflow - https://www.vulncheck.com/advisories/beetel-connection-manager-stack-based-buffer-overflow
CVE ID: CVE-2013-10037 State: PUBLISHED Published: 2025-07-31T15:01:44.165Z Last Updated: 2025-07-31T15:23:56.844Z Vendors: Eppler Software Products: WebTester Problem Types: CWE-78 Description: An OS command injection vulnerability exists in WebTester version 5.x via the install2.php installation script. The parameters cpusername, cppassword, and cpdomain are passed directly to shell commands without sanitization. A remote unauthenticated attacker can exploit this flaw by sending a crafted HTTP POST request, resulting in arbitrary command execution on the underlying system with web server privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercont
with web server privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/webtester_exec.rb - https://sourceforge.net/p/webtesteronline/bugs/3/ - https://www.exploit-db.com/exploits/29132 - https://advisories.checkpoint.com/defense/advisories/public/2014/cpai-2014-1620.html - https://www.vulncheck.com/advisories/webtester-unauth-command-execution
CVE ID: CVE-2013-10038 State: PUBLISHED Published: 2025-07-31T14:54:47.793Z Last Updated: 2025-07-31T18:33:22.861Z Vendors: TUFaT Products: FlashChat Problem Types: CWE-434 Description: An unauthenticated arbitrary file upload vulnerability exists in FlashChat versions 6.0.2 and 6.0.4 through 6.0.8. The upload.php endpoint fails to properly validate file types and authentication, allowing attackers to upload malicious PHP scripts. Once uploaded, these scripts can be executed remotely, resulting in arbitrary code execution as the web server user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploi
CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/flashchat_upload_exec.rb - https://www.exploit-db.com/exploits/28709 - https://www.fortiguard.com/encyclopedia/ips/37342/flashchat-arbitrary-file-upload - https://www.phpbb.com/community/viewtopic.php?t=2627786 - https://www.vulncheck.com/advisories/flashchat-arbitrary-file-upload-rce
CVE ID: CVE-2013-10039 State: PUBLISHED Published: 2025-07-31T14:55:54.624Z Last Updated: 2025-07-31T15:13:16.183Z Vendors: GestioIP Products: IPAM Problem Types: CWE-78 Description: A command injection vulnerability exists in GestioIP 3.0 commit ac67be and earlier in ip_checkhost.cgi. Crafted input to the 'ip' parameter allows attackers to execute arbitrary shell commands on the server via embedded base64-encoded payloads. Authentication may be required depending on deployment configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/gestioip_exec.rb - https://sourceforge.n
busercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/gestioip_exec.rb - https://sourceforge.net/p/gestioip/gestioip/ci/ac67be9fce5ee4c0438d27dfa5c1dcbca08c457c/ - https://sourceforge.net/projects/gestioip/ - https://www.vulncheck.com/advisories/gestioip-rce
CVE ID: CVE-2013-10040 State: PUBLISHED Published: 2025-07-31T14:53:55.238Z Last Updated: 2025-11-20T23:21:50.227Z Vendors: ClipBucket LLC Products: ClipBucket Problem Types: CWE-434 Description: ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/. This endpoint allows unauthenticated users to upload arbitrary files, including executable PHP scripts. Once uploaded, the attacker can access the file via a predictable path and trigger remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/expl
- CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/clipbucket_upload_exec.rb - https://packetstorm.news/files/id/123480 - https://github.com/arslancb/clipbucket - https://clipbucket.com/ - https://www.vulncheck.com/advisories/clipbucket-arbitrary-file-upload-rce
CVE ID: CVE-2013-10042 State: PUBLISHED Published: 2025-07-31T14:55:25.594Z Last Updated: 2025-11-20T23:23:31.279Z Vendors: freeFTPd Products: freeFTPd Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of service or arbitrary code execution. Exploitation requires the anonymous user account to be enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metaspl
abled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freeftpd_pass.rb - https://www.exploit-db.com/exploits/27747 - https://www.vulncheck.com/advisories/freeftpd-pass-command-stack-based-buffer-overflow