Sql injection

2010-04-2214:30:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.6%

JSON

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the (1) USER (aka username) or (2) PASS (aka password) command.

CPENameOperatorVersion
xlight_ftp_servereq2.835
xlight_ftp_servereq1.65
xlight_ftp_servereq2.2
xlight_ftp_servereq1.64
xlight_ftp_servereq2.02
xlight_ftp_servereq3.1.5
xlight_ftp_servereq2.861
xlight_ftp_servereq2.0
xlight_ftp_servereq2.83
xlight_ftp_servereq2.82

Name	Operator	Version
xlight_ftp_server	eq	2.835
xlight_ftp_server	eq	1.65
xlight_ftp_server	eq	2.2
xlight_ftp_server	eq	1.64
xlight_ftp_server	eq	2.02
xlight_ftp_server	eq	3.1.5
xlight_ftp_server	eq	2.861
xlight_ftp_server	eq	2.0
xlight_ftp_server	eq	2.83
xlight_ftp_server	eq	2.82