Datawizard - vulnerabilities (CVEs)
7 CVEs in 3 products, 0 in the last 30 days, newest from 2009-10-05.
Products
- Ftpxq - 5 CVEs
- Ftpxq Server - 1 CVEs
- Webxq - 1 CVEs
Newest CVEs of Datawizard
- CVE-2009-3545 - CVSS 4 (medium), 2009-10-05: DataWizard Technologies FtpXQ FTP Server 3.0 allows remote authenticated users to cause a denial of service (crash) via a long ABOR command.
- CVE-2006-5568 - CVSS 5 (medium), 2006-10-27: FtpXQ Server 3.0.1 allows remote attackers to cause a denial of service (CPU exhaustion) via a long MKD command.
- CVE-2006-5569 - CVSS 6.4 (medium), 2006-10-27: FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read or write arbitrary files via unknown vectors. NOTE: the…
- CVE-2002-1920 - CVSS 5 (medium), 2002-12-31: Buffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial of service (crash) via a MKD command with a long directory name.
- CVE-2001-1213 - CVSS 6.4 (medium), 2001-12-18: The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary…
- CVE-2001-0495 - CVSS 5 (medium), 2001-06-27: Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (dot dot) attack.
- CVE-2001-0293 - CVSS 5 (medium), 2001-05-03: Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET command.
