MEDIUM🇬🇧 English

CVE-2014-1842

CVSS 5.0v2.0pub. 2014-04-29upd. 2026-05-06

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a .. (dot dot) in the search-bar value.

oryginał EN
CVSS Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Southrivertech Titan Ftp Server

    APP
    Southrivertech
    10.01.174010.0.173310.30≤ 10.40
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Path Traversal
CWE
Referencje

Powiązane podatności

CVE-2023-22629HIGH8.8ten sam produkt

An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerabili...

CVE-2023-45690MEDIUM4.9ten sam produkt

Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user ...

CVE-2022-44215MEDIUM6.1ten sam produkt

There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target...

CVE-2019-10009MEDIUM6.5ten sam produkt

A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authent...

CVE-2014-1843MEDIUM5.0ten sam produkt

Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remo...