Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2008-12-19 18:30
Updated : 2024-02-04 17:33
NVD link : CVE-2008-5693
Mitre link : CVE-2008-5693
CVE.ORG link : CVE-2008-5693
JSON object : View
Products Affected
ipswitch
- ws_ftp
CWE
CWE-20
Improper Input Validation