CVE-2021-30140

概要

参考情報

• packetstormsecurity.com/files/167228/LiquidFiles-3.4.15-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2022/May/41 · Exploit
• gist.github.com/rodnt/9f7d368fac38cafa7334598ec94fb167 · Exploit
• liquidfiles.com/support.html · Vendor Advisory
• tempest.com.br · Not Applicable

liquidfiles のその他の脆弱性

• CVE-2025-56132高 7.3LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns disti…
• CVE-2025-46094低 3.8LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.
• CVE-2025-46093高 8.8LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as …
• CVE-2023-4393中 6.1HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phish…
• CVE-2021-43397高 8.8LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.