Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Easewe Software Subscribe
Filtered by product Easewe Ftp Ocx Activex Control
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-5292 1 Easewe Software 1 Easewe Ftp Ocx Activex Control 2015-01-02 7.5 HIGH N/A
The EaseWeFtp.FtpLibrary ActiveX control in EaseWeFtp.ocx in Easewe FTP OCX 4.5.0.9 does not restrict access to certain methods, which allows remote attackers to execute arbitrary files via a pathname in the first argument to the (1) Execute or (2) Run method, (3) write to arbitrary files via a pathname in the argument to the CreateLocalFile method, (4) create arbitrary directories via a pathname in the argument to the CreateLocalFolder method, or (5) delete arbitrary files via a pathname in the argument to the DeleteLocalFile method.