| Package | Affected versions | Patched versions |
|---|---|---|
| crossftp pro | = 1.14= 1.15= 1.16= 1.17= 1.18= 1.19= 1.20= 1.21= 1.22= 1.23= 1.24= 1.25= 1.26= 1.27= 1.28= 1.29= 1.30= 1.31= 1.32= 1.33= 1.34= 1.35= 1.36= 1.37= 1.38= 1.39= 1.40= 1.41= 1.42= 1.50= 1.51= 1.52= 1.53≤ 1.65a |
Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free