|
ProFTPD Character Encoding SQL Injection Vulnerability
ProFTPD is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to manipulate SQL queries, modify data, or exploit latent vulnerabilities in the underlying database. This may result in unauthorized access and a compromise of the application; other attacks are also possible. The issue affects ProFTPD 1.3.1 and later versions. |
|
|
