Description
Netwin SurgeFTP version 23c8 and prior contains a vulnerability in its web-based administrative console that allows authenticated users to execute arbitrary system commands via crafted POST requests to `surgeftpmgr.cgi`. This can lead to full remote code execution on the underlying system.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Netwin SurgeFTP
Default version status: unaffected
0 to ≤ 23c8affected
References
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/netwin_surgeftp_exec.rb ↗
- https://www.exploit-db.com/exploits/23522 ↗
- https://www.exploit-db.com/exploits/23601 ↗
- https://netwinsite.com/surgeftp/ ↗
- https://www.vulncheck.com/advisories/netwin-surgeftp-auth-rce ↗