CVE-2014-1842 PoC — South River Titan FTP Server Web界面目录遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2014/CVE-2014-1842.yaml

Associated Vulnerability

Title: South River Titan FTP Server Web界面目录遍历漏洞 (CVE-2014-1842)
Description:Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a .. (dot dot) in the search-bar value.

Description

Titan FTP Server versions prior to 10.40 build 1829 contain a directory traversal vulnerability in the web interface search functionality. Remote attackers can list all existing users by submitting "/../" in the search bar, enabling user enumeration and reconnaissance.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →