ProFTPD Character Encoding SQL Injection Vuln...

来源:百度文库 编辑:神马文学网 时间:2024/04/29 21:58:32
ProFTPD Character Encoding SQL Injection Vulnerability

ProFTPD is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to manipulate SQL queries, modify data, or exploit latent vulnerabilities in the underlying database. This may result in unauthorized access and a compromise of the application; other attacks are also possible.

The issue affects ProFTPD 1.3.1 and later versions.