[ Vendor · 2 CVEs ]
wftpserver
CVEs affecting wftpserver published in the last 30 days, plus any wftpserver CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-47812 | 10 Jul 2025 | CVSS 10.0 | Wing FTP Server Improper Neutralization of Null Byte or NUL CharacterIn Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into… | Exploited |
| CVE-2025-47813 | 10 Jul 2025 | CVSS 4.3 | Wing FTP Server Information Disclosureloginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie. | Exploited |