CVE-2025-34299
Published Nov 7, 2025Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading…
Vendor archive
monstaftp CVEs
Beta · best-effort7 CVEs tagged to vendor monstaftp — 6 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2022-31827
Published Jun 9, 2022MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at HTTPFetcher.php.
CVE-2022-27469
Published Apr 26, 2022Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).
CVE-2022-27468
Published Apr 26, 2022Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to execute arbitrary code via a crafted file uploaded to the web server.
CVE-2020-14057
Published Jul 1, 2020Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to g…
CVE-2020-14056
Published Jul 1, 2020Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch functionality. This allows attackers to read ar…
CVE-2020-14055
Published Jul 1, 2020Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding.
Showing 1-7 of 7 CVEsPage 1 of 1