GCVE - cpe:2.3:a:trueconf:server:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:trueconf:server:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Trueconf (`bfcc9041-0079-5954-86ee-fcd8e37c4959`)
Product	Server (`096385c6-976c-5e89-9ef9-869078f54b55`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-34110`	vulnerable	2026-06-08 07:19:02.211747	ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure A directory traversal vulnerability exists in ColoradoFTP Server ≤ 1.3 Build 8 for Windows, allowing unauthenticated attackers to read or write arbitrary files outside the configured FTP root directory. The flaw is due to insufficient sanitation of user-supplied file paths in the FTP GET and PUT command handlers. Exploitation is possible by submitting traversal sequences during FTP operations, enabling access to system-sensitive files. This issue affects only the Windows version of ColoradoFTP. Published: 2025-07-15T13:01:10.712Z Updated: 2026-05-15T11:14:43.329Z Open on db.gcve.eu Reference links https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/ftp/colorado_ftp_traversal.rb https://www.exploit-db.com/exploits/40231 https://bitbucket.org/nolife/coloradoftp/commits/16a60c4a74ef477cd8c16ca82442eaab2fbe8c86 https://www.vulncheck.com/advisories/colorado-ftp-server-path-traversal-information-disclosure	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46764`	vulnerable	2026-06-08 05:50:39.403307	Details available CRITICAL (9.8) A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution. Published: 2022-12-27T00:00:00.000Z Updated: 2026-02-27T17:32:51.107Z Open on db.gcve.eu Reference links https://solidlab.ru/our-news/145-trueconf.html https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46764.txt https://vuldb.com/?diff.216845	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46763`	vulnerable	2026-06-08 05:50:39.402632	Details available HIGH (8.8) A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code. Published: 2022-12-27T00:00:00.000Z Updated: 2026-02-10T17:20:04.773Z Open on db.gcve.eu Reference links https://solidlab.ru/our-news/145-trueconf.html https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46763.txt https://vuldb.com/?diff.216851	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-20120`	vulnerable	2026-06-08 05:09:23.302038	TrueConf Server cross-site request forgery MEDIUM (4.3) A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2022-06-29T16:15:34.000Z Updated: 2025-04-15T14:08:58.187Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/41184/ https://vuldb.com/?id.96634	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-20119`	vulnerable	2026-06-08 05:09:23.301698	TrueConf Server change-lang redirect LOW (3.5) A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the file /admin/general/change-lang. The manipulation of the argument redirect_url leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2022-06-29T16:15:33.000Z Updated: 2025-04-15T14:09:09.413Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/41184/ https://vuldb.com/?id.96633	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-20118`	vulnerable	2026-06-08 05:09:23.301249	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-20117`	vulnerable	2026-06-08 05:09:23.300914	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-20116`	vulnerable	2026-06-08 05:09:23.300490	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-20115`	vulnerable	2026-06-08 05:09:23.300036	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-20114`	vulnerable	2026-06-08 05:09:23.299585	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-20113`	vulnerable	2026-06-08 05:09:23.299050	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.