Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:04:24 +0000 certa-2008-avi-531 — Une vulnérabilité dans ftpd permet à une personne malintentionnée d'effectuer une attaque de type <span class="textit">… https://cve.radiocsirt.org/vuln/certa-2008-avi-531 certa-2008-avi-531 https://cve.radiocsirt.org/vuln/certa-2008-avi-531 EUVD-2026-129282 https://cve.radiocsirt.org/vuln/euvd-2026-129282 EUVD-2026-129282 https://cve.radiocsirt.org/vuln/euvd-2026-129282 fkie_cve-2008-4247 https://cve.radiocsirt.org/vuln/fkie_cve-2008-4247 <p>ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.</p> <p>ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2008-4247 GHSA-px9q-8f7r-rv49 https://cve.radiocsirt.org/vuln/ghsa-px9q-8f7r-rv49 <p>ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.</p> <p>ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.</p> https://cve.radiocsirt.org/vuln/ghsa-px9q-8f7r-rv49 gsd-2008-4247 https://cve.radiocsirt.org/vuln/gsd-2008-4247 gsd-2008-4247 https://cve.radiocsirt.org/vuln/gsd-2008-4247