Wing FTP Server Information Disclosure Vulnerability

Description

References

• MrTuxracer/advisories · Exploit
• rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812 · Exploit
• wftpserver.com · Product
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2025-47813

wing ftp server 的其他漏洞

• CVE-2026-44403高危 7.2Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allow…
• CVE-2020-37079低危 3.5Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery (CSRF) vulnerability in the web administration interface that a…
• CVE-2019-25267高危 7.8Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with…
• CVE-2020-37032高危 8.8Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute…
• CVE-2025-47812严重 10.0EXPLOITED (CISA KEV)In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code…