CVE-2010-4153

Published: Nov 3, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.

Affected (34)

Products: Crossftp: Crossftp Pro

Crossftp

1 product

Crossftp Pro

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Crossftp Crossftp Pro	Up to 1.65a
Crossftp Crossftp Pro	Version 1.14
Crossftp Crossftp Pro	Version 1.15
Crossftp Crossftp Pro	Version 1.16
Crossftp Crossftp Pro	Version 1.17
Crossftp Crossftp Pro	Version 1.18
Crossftp Crossftp Pro	Version 1.19
Crossftp Crossftp Pro	Version 1.20
Crossftp Crossftp Pro	Version 1.21
Crossftp Crossftp Pro	Version 1.22
Crossftp Crossftp Pro	Version 1.23
Crossftp Crossftp Pro	Version 1.24
Crossftp Crossftp Pro	Version 1.25
Crossftp Crossftp Pro	Version 1.26
Crossftp Crossftp Pro	Version 1.27
Crossftp Crossftp Pro	Version 1.28
Crossftp Crossftp Pro	Version 1.29
Crossftp Crossftp Pro	Version 1.30
Crossftp Crossftp Pro	Version 1.31
Crossftp Crossftp Pro	Version 1.32
Crossftp Crossftp Pro	Version 1.33
Crossftp Crossftp Pro	Version 1.34
Crossftp Crossftp Pro	Version 1.35
Crossftp Crossftp Pro	Version 1.36
Crossftp Crossftp Pro	Version 1.37
Crossftp Crossftp Pro	Version 1.38
Crossftp Crossftp Pro	Version 1.39
Crossftp Crossftp Pro	Version 1.40
Crossftp Crossftp Pro	Version 1.41
Crossftp Crossftp Pro	Version 1.42
Crossftp Crossftp Pro	Version 1.50
Crossftp Crossftp Pro	Version 1.51
Crossftp Crossftp Pro	Version 1.52
Crossftp Crossftp Pro	Version 1.53