Read the docs

Mywebftp

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Mywebftp records in CISA KEV

No Mywebftp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mywebftp 1 record LOW

Records

1 record in Mywebftp · all components

TI-2007-05658 CVE-2007-5919 · GHSA-w2h8-f75c-6252

MyWebFTP, possibly 5.3.2, stores sensitive information under the web root with…

Priority LOW 25

MyWebFTP, possibly 5.3.2, stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain an MD5 password hash via a direct request for pass/pass.txt.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01218 Published 2007-11-10 No fix listed CWE-264
Open these records in search →