CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-07-10
Wing FTP Server Remote Code Execution Vulnerability via Null Byte Injection Security Advisory (CVE-2025-47812)
[Affected Scope] User and admin web interfaces of Wing FTP Server before version 7.4.4
[Impact] Unauthenticated attackers (including anonymous FTP accounts) can inject arbitrary Lua code into session files, leading to remote code execution with root or SYSTEM privileges
[Mitigation] Immediately upgrade Wing FTP Server to version 7.4.4 or later, and restrict external access to the web administration interface