CVE-2016-15003

Published: Jul 18, 2022Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected (1)

Products: Filezilla Project: Filezilla Client

Filezilla Project

1 product

Filezilla Client

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Filezilla Project Filezilla Client	Version 3.17.0

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

Unquoted Search Path or Element

The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

References (6)

https://vuldb.com/?id.97204

Source: cna@vuldb.com

Third Party Advisory

https://www.exploit-db.com/exploits/39803/

Source: cna@vuldb.com

ExploitThird Party AdvisoryVDB Entry

https://youtu.be/r06VwwJ9J4M

Source: cna@vuldb.com

ExploitThird Party Advisory

https://vuldb.com/?id.97204

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.exploit-db.com/exploits/39803/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://youtu.be/r06VwwJ9J4M

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.