Ftpshell Ftpshell Server vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ftpshell Ftpshell Server: 2 record(s), with affected versions and fixes.
cpe:2.3:a:ftpshell:ftpshell_server

CVE-2018-25226 Medium · 5.5 CWE-787 Mar 30, 2026

FTPShell Server 6.83 Denial of Service via Account Name

FTPShell Server 6.83 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the account name field. Attackers can trigger a denial of service by pasting a 417-byte payload into the 'Account name to ban' parameter within the Manage FTP Accounts interface.

CVE-2019-25619 High · 7.8 CWE-787 Mar 22, 2026

FTP Shell Server 6.83 Buffer Overflow via Account Name

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite the return address and execute calc.exe or other commands.