Description (CNA)
Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery (CSRF) vulnerability in the web administration interface that allows attackers to delete admin users. Attackers can craft a malicious HTML page with a hidden form to submit a request that deletes the administrative user account without proper authorization.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Wing FTP Server / Wing FTP Server | affected 6.2.6 |
CWE
CWE-352
References
- https://www.exploit-db.com/exploits/48200
- https://www.wftpserver.com
- https://www.wftpserver.com/serverhistory.htm
- https://www.vulncheck.com/advisories/wing-ftp-server-cross-site-request-forgery
ADP enrichment
No English description supplied.
No references supplied.