coreftp.com
http://www.coreftp.com/forums/viewtopic.php?f=15&t=4022509 CVE-2022-22836
MEDIUM
CoreFTP Server build 725 - Directory Traversal (Authenticated)
Record summary
CVE-2022-22836 has a selected CVSS score of 6.5 (medium); EIP currently links 1 catalogued exploit.
Description
CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCoreFTP Server build 725 - Directory Traversal (Authenticated)ExploitDB exploitby LiamInfosecNot analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-22836 yoursecuritybores.me
https://yoursecuritybores.me/coreftp-vulnerabilities