Количество 5
Количество 5
CVE-2026-42167
mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM).
CVE-2026-42167
mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM).
CVE-2026-42167
mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute ar ...
GHSA-q25r-7mmc-3mcj
mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM).
BDU:2026-06120
Уязвимость модуля mod_sql FTP-сервера ProFTPD, позволяющая нарушителю выполнить произвольные команды
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-42167 mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM). | CVSS3: 8.1 | 4% Низкий | 3 месяца назад |
 | CVE-2026-42167 mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM). | CVSS3: 8.1 | 4% Низкий | 3 месяца назад |
| CVE-2026-42167 mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute ar ... | CVSS3: 8.1 | 4% Низкий | 3 месяца назад |
| GHSA-q25r-7mmc-3mcj mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM). | CVSS3: 8.1 | 4% Низкий | 3 месяца назад |
 | BDU:2026-06120 Уязвимость модуля mod_sql FTP-сервера ProFTPD, позволяющая нарушителю выполнить произвольные команды | CVSS3: 8.1 | 4% Низкий | 4 месяца назад |
Уязвимостей на страницу