CVE-2015-4108

概要

参考情報

• packetstormsecurity.com/files/132179/Wing-FTP-4.4.6-Code-Execution-Cross-Site-Request-Forgery.html · Exploit
• packetstormsecurity.com/files/132180/Wing-FTP-4.4.6-Cross-Site-Request-Forgery.html · Exploit
• securityfocus.com/archive/1/535681/100/0/threaded
• securityfocus.com/archive/1/535685/100/0/threaded
• securityfocus.com/archive/1/535686/100/0/threaded
• wftpserver.com/serverhistory.htm · Patch

wing ftp server のその他の脆弱性

• CVE-2026-44403高 7.2Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allow…
• CVE-2020-37079低 3.5Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery (CSRF) vulnerability in the web administration interface that a…
• CVE-2019-25267高 7.8Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with…
• CVE-2020-37032高 8.8Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute…
• CVE-2025-47813中 4.3悪用確認済み（CISA KEV）loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UI…