cve/2008/CVE-2008-6534.md

CVE-2008-6534

Description

Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as "&" (ampersand) in the middle of an argument.

POC

Reference

• http://vuln.sg/nullftpserver1107-en.html
• https://www.exploit-db.com/exploits/7355

Github

No PoCs found on GitHub currently.