← Vulnerability feed

Vulnerability record · CVE-2015-10003 · published 17 July 2022

CVE-2015-10003: Filezilla-project filezilla server vulnerability

Filezilla Project · Filezilla Server

A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT Handler. The manipulation leads to unintended intermediary. It is possible to initiate the attack remotely. Upgrading to version 0.9.51 is able to address this issue. It is recommended to upgrade the affected component.

4.3 CVSS 3.1 Medium EPSS 0.54% · top 56.7% CWE-441 · CWE-441CWE-610 · CWE-610
4.3CVSS 3.1 base score
0.54%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT Handler. The manipulation leads to unintended intermediary. It is possible to initiate the attack remotely. Upgrading to version 0.9.51 is able to address this issue. It is recommended to upgrade the affected component.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securitygalore.com/site3/filezilla_ftp_server_advisory PatchTechnical DescriptionThird Party Advisory
https://vuldb.com/?id.97203 Third Party Advisory
http://www.securitygalore.com/site3/filezilla_ftp_server_advisory PatchTechnical DescriptionThird Party Advisory
https://vuldb.com/?id.97203 Third Party Advisory

Track CVE-2015-10003 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2014-0160OpenSSL TLS/DTLS Heartbeat Extension Out-of-Bounds Read (Heartbleed)OpenSSL 1.0.1 before 1.0.1g mishandles Heartbeat Extension packets in its TLS and DTLS implementations, causing an out-of-bounds read of process memo…KEVEPSS 100%analysed7.4CVE-2014-0224OpenSSL ChangeCipherSpec handling flaw enables MITM session hijackOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages. A man-in-the…EPSS 95%analysed5.0CVE-2005-0850Filezilla-project filezilla server improper input validation vulnerabilityFileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name …EPSS 2.2%5.0CVE-2005-0851Filezilla-project filezilla server vulnerabilityFileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via cer…EPSS 2.2%4.3CVE-2009-0884Filezilla-project filezilla server classic buffer overflow vulnerabilityBuffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS pac…EPSS 3.4%4.0CVE-2006-6565FileZilla Server LIST/NLST wildcard NULL pointer dereference DoSFileZilla Server before 0.9.22 crashes on a wildcard argument passed to the LIST or NLST FTP commands, caused by a NULL pointer dereference. The reco…EPSS 71%analysed10.0CVE-2026-83548SonicWall SMA1000 pre-auth SSRF via alternate access pathThe SMA1000 Appliance Work Place interface exposes an unintended alternate access path that allows server-side request forgery before authentication.…KEVEPSS 8.8%analysed

Source: NIST National Vulnerability Database (record CVE-2015-10003), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.