Beveiligingsadvies

CVE-2012-10028

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-05 20:04:20
Laatst bijgewerkt 2026-05-15 11:13:55
Toegewezen door VulnCheck
CVSS-score 8.6
Status PUBLISHED

Beschrijving

Netwin SurgeFTP version 23c8 and prior contains a vulnerability in its web-based administrative console that allows authenticated users to execute arbitrary system commands via crafted POST requests to `surgeftpmgr.cgi`. This can lead to full remote code execution on the underlying system.