Progress WS_FTP Server any version

WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

WS_FTP Server Directory Traversal

WS_FTP Server Arbitrary File Upload

WS_FTP Server Ad Hoc Transfer Module Reflected Cross-Site Scripting Vulnerability

WS_FTP Server Stored Cross-Site Scripting Vulnerability

WS_FTP Server SQL Injection via Administrative Interface

Multi-Factor Authentication Bypass in Progress WS_FTP Server

WS_FTP Server Reflected Cross-Site Scripting in Administrative Interface

In Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the administrative interface due to insufficient authorization controls applied on user modification workflows.

WS_FTP Server Cross-Site Request Forgery (CSRF) Vulnerability

Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP Server

A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. An attacker can supply a string using special patterns via the SCP protocol to disclose WS_FTP usernames as well as filenames.

WS_FTP Server Information Disclosure via Directory Listing

Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certain sensitive information from being displayed in the (1) Files and (2) Summary tabs. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.