Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium

FTP Server

CrushFTP Server

CrushFTP is an extremely powerful easy to use solution that runs on almost everything: OS X 10.5 - 10.9 WinXP - Win2012 Linux Solaris BSD Unix etc

Official Site:

https://www.crushftp.com/index.html

Severity Summary:

Critical: 4 Medium: 6
Reference
Title
Severity
CVE-2017-14035
CrushFTP Server Deserialization of Untrusted Data Vulnerability
Critical
CVE-2023-43177
CrushFTP Server Improper Control of Dynamically-Managed Code Resources Vulnerability
Critical
CVE-2024-4040
CrushFTP Server Improper Control of Generation of Code (Code Injection) Vulnerability
Critical
CVE-2025-31161
CrushFTP Server Other Vulnerability
Critical
CVE-2018-18288
CrushFTP Server URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2017-14038
CrushFTP Server URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2017-14037
CrushFTP Server Improper Neutralization of CRLF Sequences (CRLF Injection) Vulnerability
Medium
CVE-2017-14036
CrushFTP Server Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2023-48795
CrushFTP Server Improper Validation of Integrity Check Value Vulnerability
Medium
CVE-2021-44076
CrushFTP Server Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium