CVE Alert: CVE-2025-47813 - wftpserver - Wing FTP Server - RedPacket Security

loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.

RedPacket Security
CVE Alert: CVE-2019-25267 - Wftpserver - Wing FTP Server - RedPacket Security

Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system

RedPacket Security