CVE-2020-37079 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery (CSRF) vulnerability in the web administration interface that allows attackers to d…
Medium CVSS: 5.1

CVE-2020-37079

Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery (CSRF) vulnerability in the web administration interface that allows attackers to delete admin users. Attackers can craft a malicious HTML page with a hidden form to submit a request that deletes the administrative user account without proper authorization.
Vendor
Wftpserver
Product
Wing Ftp Server
CWE
CWE-352
Yayın Tarihi
2026-02-07 00:15:53
Güncelleme
2026-02-18 14:48:17
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-352 Wing Ftp Server MEDIUM Wftpserver 2026

Referanslar

https://www.exploit-db.com/exploits/48200 https://www.vulncheck.com/advisories/wing-ftp-server-cross-site-request-forgery https://www.wftpserver.com https://www.wftpserver.com/serverhistory.htm