CVE-2018-15906 – SolarWinds Serv-U FTP 15.1.6 Privilege Escalation

https://notcve.org/view.php?id=CVE-2018-15906

02 Feb 2019 — SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file. SolarWinds Serv-U FTP Server 15.1.6 permite que usuarios remotos autenticados ejecuten código arbitrario aprovechando la característica de importación y modificando un archivo CSV. SolarWinds Serv-U FTP Server version 15.1.6 is vulnerable to privilege escalation from remote authenticated users by leveraging the CSV user import function. This leads to obta... • https://packetstorm.news/files/id/151473 •