VULNERABILITY INTELLIGENCE
CVE-2010-4153
CVSS score9.3 HIGH
EPSS probability1.39%
CISA KEVNot currently listed
Published2010-11-03
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
Weakness classification
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')