CVE-2008-4242

ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF)…

published September 25, 2008

CVSS
—
EPSS
7%
Percentile
94.2
In the wild
Unconfirmed
What it is

ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07066 · 94.2th percentile
Published
2008-09-25T19:00Z
EPSS history
Timeline
  • 25 SEP 19:00Z
    ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF)…
    cvelistv5