VULNERABILITY INTELLIGENCE

CVE-2023-40046

CVSS score8.2 HIGH

EPSS probability1.01%

CISA KEVNot currently listed

Published2023-09-27

Last modified2026-06-17

Description

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a SQL injection vulnerability exists in the WS_FTP Server manager interface. An attacker may be able to infer information about the structure and contents of the database and execute SQL statements that alter or delete database elements.