VULNERABILITY INTELLIGENCE

CVE-2008-6534

CVSS score7.1 HIGH
EPSS probability4.13%
CISA KEVNot currently listed
Published2009-03-26
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:S/C:C/I:C/A:C

Description

Incomplete blacklist vulnerability in NULL FTP Server Free and Pro 1.1.0.7 allows remote authenticated users to execute arbitrary commands via a custom SITE command containing shell metacharacters such as "&" (ampersand) in the middle of an argument.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references