Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FTP Admin多个远程输入验证漏洞
Vulnerability Description
FTP Admin是结合vsFTPd、sudo、apache和PHP使用的用户管理工具。 FTP Admin的实现上存在多个输入验证漏洞，远程攻击者可能利用此漏洞获取非授权访问。 FTP Admin的index.php文件中没有正确地验证对page参数的输入，允许远程攻击者包含本地或外部FTP资源的任意文件。成功攻击要求有效的用户凭据。 index.php文件中没有正确地验证认证，远程攻击者无需拥有有效的用户凭据便可以通过将loggedin参数设置为true登录并添加新的FTP用户。成功攻击要求打开了re
CVSS Information
N/A
Vulnerability Type
N/A