Exploitation Summary
EIP tracks 1 public exploit for CVE-2016-15003. PoCs published by Cyril Vallicari.
AI-analyzed exploit summary This is a writeup describing an unquoted path vulnerability in FileZilla 3.17.0.0 installer, which could allow local privilege escalation by executing arbitrary code with elevated privileges. The exploit involves placing a malicious executable in a specific path to be executed during uninstallation.
Description
A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Exploits (1)
This is a writeup describing an unquoted path vulnerability in FileZilla 3.17.0.0 installer, which could allow local privilege escalation by executing arbitrary code with elevated privileges. The exploit involves placing a malicious executable in a specific path to be executed during uninstallation.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L