Wing FTP Server Information Disclosure Vulnerability

概要

参考情報

• MrTuxracer/advisories · Exploit
• rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812 · Exploit
• wftpserver.com · Product
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2025-47813

wing ftp server のその他の脆弱性

• CVE-2026-44403高 7.2Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allow…
• CVE-2020-37079低 3.5Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery (CSRF) vulnerability in the web administration interface that a…
• CVE-2019-25267高 7.8Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with…
• CVE-2020-37032高 8.8Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute…
• CVE-2025-47812緊急 10.0悪用確認済み（CISA KEV）In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code…