Security Advisory

CVE-2023-40046

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-09-27 14:50:18
Last updated 2024-09-23 15:07:01
Assigner ProgressSoftware
State PUBLISHED

Description

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a SQL injection vulnerability exists in the WS_FTP Server manager interface. An attacker may be able to infer information about the structure and contents of the database and execute SQL statements that alter or delete database elements.