CVE-2015-2857

Description

References

• packetstormsecurity.com/files/132665/Accellion-FTA-getStatus-verify_oauth_token-Command-Execution.html · Third Party Advisory
• rapid7.com/db/modules/exploit/linux/http/accellion_fta_getstatus_oauth · Exploit
• community.rapid7.com/community/metasploit/blog/2015/07/10/r7-2015-08-accellion-file-transfer-appliance-vulnerabilities-cve-2015-2856-cve-2015-2857 · Exploit
• exploit-db.com/exploits/37597 · Exploit

Autres vulnérabilités de file transfer appliance

• CVE-2019-5623CRITIQUE 9.8Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used i…
• CVE-2019-5622CRITIQUE 9.8Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-798: Use of Hard-coded Credentials.
• CVE-2015-2856ÉLEVÉE 7.5Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 …
• CVE-2017-8796CRITIQUE 9.8An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because mysql_real_escape_string is misused, seos/courier/communicatio…
• CVE-2017-8795MOYENNE 6.1An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos/courier/smtpg_add.html with the param parame…