Wing Ftp Server
Approved changes feed: RSS · Atom
cpe:2.3:a:wing_ftp_server:wing_ftp_server:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Wing Ftp Server (37b5b218-2659-58b8-9545-3e7e96acc75b) |
|---|---|
| Product | Wing Ftp Server (6d98abd5-08e3-5c6e-b612-4b4bb4568eb0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44403 |
vulnerable | 2026-06-08 08:05:11.033707 |
Wing FTP Server < 8.1.3 Authenticated Remote Code Execution via Session Serialization
HIGH (7.2)
Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allows authenticated administrators to inject arbitrary Lua code through the domain admin mydirectory field. Attackers can exploit unsafe serialization of session values into Lua source code without proper escaping of closing delimiters, causing the injected code to be executed when the poisoned session is loaded via loadfile().
Published: 2026-05-12T20:43:41.848Z
Updated: 2026-07-14T20:01:15.422Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37881 |
vulnerable | 2026-06-08 06:08:16.070994 |
Weak Access Control between Domains in Wing FTP Server <= 7.2.0
MEDIUM (4.9)
Weak access control in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Server: <= 7.2.0.
Published: 2023-09-12T08:14:20.704Z
Updated: 2024-09-25T15:24:43.792Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37879 |
vulnerable | 2026-06-08 06:08:16.070469 |
Exposed Session Variable in Wing FTP Server <= 7.2.0
MEDIUM (6.5)
Insecure storage of sensitive information in Wing FTP Server (User Web Client) allows information elicitation.This issue affects Wing FTP Server: <= 7.2.0.
Published: 2023-09-12T08:15:31.668Z
Updated: 2024-09-24T20:47:19.799Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37878 |
vulnerable | 2026-06-08 06:08:16.070064 |
Insecure Default Permissions in Wing FTP Server <= 7.2.0
MEDIUM (6.1)
Insecure default permissions in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Server: <= 7.2.0.
Published: 2023-09-12T08:16:36.910Z
Updated: 2024-09-26T14:13:48.788Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37875 |
vulnerable | 2026-06-08 06:08:16.068456 |
Cross-Site Scripting Vulnerability in Wing FTP Server <= 7.2.0
LOW (3)
Improper encoding or escaping of output in Wing FTP Server (User Web Client) allows Cross-Site Scripting (XSS).This issue affects Wing FTP Server: <= 7.2.0.
Published: 2023-09-12T08:17:22.310Z
Updated: 2024-09-24T20:36:33.108Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37079 |
vulnerable | 2026-06-08 05:25:50.111954 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37032 |
vulnerable | 2026-06-08 05:25:50.040780 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.