Vulnerabilities in ProFTPD

3 results

CVE-2026-42167HIGHmod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USEPSS 5.0%CVE-2021-47865HIGHProFTPD 1.3.7a - Remote Denial of ServiceEPSS 0.5%CVE-2026-44331HIGHIn ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap2_sql.c allows a remEPSS 0.5%