Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Ccfile Subscribe
Filtered by product Cc File Transfer
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-12784 1 Ccfile 1 Cc File Transfer 2017-08-25 5.0 MEDIUM 7.5 HIGH
In Youngzsoft CCFile (aka CC File Transfer) 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID for a NoviWare issue, but the correct ID for that issue is CVE-2017-12787.