Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Argument injection vulnerability in (1) src/content/js/connection/sftp.js and (2) src/content/js/connection/controlSocket.js.in in FireFTP Extension 1.0.5 for Firefox allows remote authenticated SFTP users to cause victims to alter permissions, delete, download, or move the wrong file via a filename containing " (double quotes), which is not properly filtered or encoded when FireFTP constructs the command to send to psftp.exe.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Nightlight FireFTP Firefox扩展Double Quotes安全绕过漏洞
Vulnerability Description
FireFTP Extension的(1)src/content/js/connection/sftp.js和(2)src/content/js/connection/controlSocket.js.中存在自变量注入漏洞。远程验证SFTP用户可以借助一个包括双引号的文件名来迫使受害用户更改许可证，删除，下载，或移出错误文件。该文件名当FireFTP构建指令发送psftp.exe时，没有被过滤或被编码。
CVSS Information
N/A
Vulnerability Type
N/A