TI-2025-24432 CVE-2025-34299 · GHSA-42m5-3r2p-wr92
Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload
Priority CRITICAL 86
Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads.
Vulnerabilities
7 records
TI-2022-13705 CVE-2022-31827 · GHSA-w54w-jfqh-pqhc
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the…
Priority MEDIUM 59
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at HTTPFetcher.php.
TI-2022-10485 CVE-2022-27469 · GHSA-rxjg-q5c5-6q8f
Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).
Priority MEDIUM 45
Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).
TI-2022-10484 CVE-2022-27468 · GHSA-xhjm-9p9r-cp2g
Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows…
Priority MEDIUM 46
Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to execute arbitrary code via a crafted file uploaded to the web server.
TI-2020-11009 CVE-2020-14057 · GHSA-689r-4r32-c586
Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations.
Priority MEDIUM 47
Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations.
TI-2020-11007 CVE-2020-14055 · GHSA-5f98-ph8j-xwqh
Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the…
Priority LOW 28
Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding.
TI-2020-11008 CVE-2020-14056 · GHSA-f4vx-g36r-6qrr
Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to…
Priority MEDIUM 45
Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch functionality.