CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-4795

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the (1) USER (aka username) or (2) PASS (aka password) command.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 39.4%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2009-4795

Xlightftpd » Xlight Ftp Server » Version: 1.1

cpe:2.3:a:xlightftpd:xlight_ftp_server:1.1
Xlightftpd » Xlight Ftp Server » Version: 1.60

cpe:2.3:a:xlightftpd:xlight_ftp_server:1.60
Xlightftpd » Xlight Ftp Server » Version: 1.61

cpe:2.3:a:xlightftpd:xlight_ftp_server:1.61
Xlightftpd » Xlight Ftp Server » Version: 1.62

cpe:2.3:a:xlightftpd:xlight_ftp_server:1.62
Xlightftpd » Xlight Ftp Server » Version: 1.62a

cpe:2.3:a:xlightftpd:xlight_ftp_server:1.62a
Xlightftpd » Xlight Ftp Server » Version: 1.64

cpe:2.3:a:xlightftpd:xlight_ftp_server:1.64
Xlightftpd » Xlight Ftp Server » Version: 1.65

cpe:2.3:a:xlightftpd:xlight_ftp_server:1.65
Xlightftpd » Xlight Ftp Server » Version: 2.0

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.0
Xlightftpd » Xlight Ftp Server » Version: 2.01

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.01
Xlightftpd » Xlight Ftp Server » Version: 2.02

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.02
Xlightftpd » Xlight Ftp Server » Version: 2.03

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.03
Xlightftpd » Xlight Ftp Server » Version: 2.1

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.1
Xlightftpd » Xlight Ftp Server » Version: 2.2

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.2
Xlightftpd » Xlight Ftp Server » Version: 2.24

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.24
Xlightftpd » Xlight Ftp Server » Version: 2.27

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.27
Xlightftpd » Xlight Ftp Server » Version: 2.40

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.40
Xlightftpd » Xlight Ftp Server » Version: 2.60

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.60
Xlightftpd » Xlight Ftp Server » Version: 2.70

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.70
Xlightftpd » Xlight Ftp Server » Version: 2.706

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.706
Xlightftpd » Xlight Ftp Server » Version: 2.72

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.72
Xlightftpd » Xlight Ftp Server » Version: 2.8

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.8
Xlightftpd » Xlight Ftp Server » Version: 2.82

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.82
Xlightftpd » Xlight Ftp Server » Version: 2.83

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.83
Xlightftpd » Xlight Ftp Server » Version: 2.835

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.835
Xlightftpd » Xlight Ftp Server » Version: 2.85

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.85
Xlightftpd » Xlight Ftp Server » Version: 2.86

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.86
Xlightftpd » Xlight Ftp Server » Version: 2.861

cpe:2.3:a:xlightftpd:xlight_ftp_server:2.861
Xlightftpd » Xlight Ftp Server » Version: 3.0

cpe:2.3:a:xlightftpd:xlight_ftp_server:3.0
Xlightftpd » Xlight Ftp Server » Version: 3.0.5

cpe:2.3:a:xlightftpd:xlight_ftp_server:3.0.5
Xlightftpd » Xlight Ftp Server » Version: 3.1

cpe:2.3:a:xlightftpd:xlight_ftp_server:3.1
Xlightftpd » Xlight Ftp Server » Version: 3.1.1

cpe:2.3:a:xlightftpd:xlight_ftp_server:3.1.1
Xlightftpd » Xlight Ftp Server » Version: 3.1.5

cpe:2.3:a:xlightftpd:xlight_ftp_server:3.1.5
Xlightftpd » Xlight Ftp Server » Version: 3.1.6

cpe:2.3:a:xlightftpd:xlight_ftp_server:3.1.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-4795

Products

Pricing

Contact Us