MiCode FileExplorer SwiFTP Server Authentication Bypass

MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials. Attackers can send arbitrary username and password combinations to the PASS command handler, which unconditionally grants access and allows listing, reading, writing, and deleting files exposed by the FTP server. The MiCode/Explorer open source project has reached end-of-life status.

N/A

认证算法的不正确实现

dhtmlx FileExplorer 安全漏洞

dhtmlx FileExplorer是dhtmlx公司的一个 JavaScript 文件系统。 dhtmlx FileExplorer存在安全漏洞，该漏洞源于嵌入式SwiFTP FTP服务器组件存在身份验证绕过，可能导致网络攻击者无需有效凭据即可登录并执行文件操作。

N/A

N/A