CVEvulnerability
CVE-2016-15003
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-07-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-428
Description
A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files\FileZilla FTP Client\uninstall.exe of the component Installer. The manipulation leads to unquoted search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected configurations
• filezilla-project filezilla client 3.17.0
Related
Weakness · CWE (1)
- CWE-428 Unquoted Search Path or Element weakness
References
- https://vuldb.com/?id.97204 Third Party Advisory
- https://www.exploit-db.com/exploits/39803/ Exploit, Third Party Advisory, VDB Entry
- https://youtu.be/r06VwwJ9J4M Exploit, Third Party Advisory
- https://vuldb.com/?id.97204 Third Party Advisory
- https://www.exploit-db.com/exploits/39803/ Exploit, Third Party Advisory, VDB Entry
- https://youtu.be/r06VwwJ9J4M Exploit, Third Party Advisory