EIP-2026-118383

PRE-CVE

CompleteFTP Server - Directory Traversal

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118383. PoCs published by zombiefx.

AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in CompleteFTP Server v3.3.0, allowing an authenticated attacker to escape the restricted directory and access arbitrary files on the system. The PoC shows the retrieval of the boot.ini file by traversing directories using '..\' sequences.

Description

CompleteFTP Server - Directory Traversal

Exploits (1)

exploitdb WORKING POC VERIFIED
by zombiefx · textremotewindows
https://www.exploit-db.com/exploits/11973

This exploit demonstrates a directory traversal vulnerability in CompleteFTP Server v3.3.0, allowing an authenticated attacker to escape the restricted directory and access arbitrary files on the system. The PoC shows the retrieval of the boot.ini file by traversing directories using '..\' sequences.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: CompleteFTP Server v3.3.0
Auth required
Prerequisites: Authenticated FTP access
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026