CVE-2021-43397

概要

参考情報

• packetstormsecurity.com/files/164997/LiquidFiles-3.5.13-Privilege-Escalation.html · Exploit
• seclists.org/fulldisclosure/2021/Nov/40 · Exploit
• seclists.org/fulldisclosure/2021/Nov/52 · Exploit
• forum.liquidfiles.com/forums/news.6 · Vendor Advisory
• man.liquidfiles.com/release_notes/version_3-6-x.html · Release Notes

liquidfiles のその他の脆弱性

• CVE-2025-56132高 7.3LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns disti…
• CVE-2025-46094低 3.8LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.
• CVE-2025-46093高 8.8LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as …
• CVE-2023-4393中 6.1HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phish…
• CVE-2021-30140中 5.4LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has …