Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Nightlight Subscribe
Filtered by product Fireftp
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-3478 2 Mozilla, Nightlight 2 Firefox, Fireftp 2009-09-30 6.0 MEDIUM N/A
Argument injection vulnerability in (1) src/content/js/connection/sftp.js and (2) src/content/js/connection/controlSocket.js.in in FireFTP Extension 1.0.5 for Firefox allows remote authenticated SFTP users to cause victims to alter permissions, delete, download, or move the wrong file via a filename containing " (double quotes), which is not properly filtered or encoded when FireFTP constructs the command to send to psftp.exe.