Skip to content

ProFTPD Project · weakness class

SQL Injection

2 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

check available
1

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

  1. ProFTPD mod_sql - Preauth User BackdoorCVE-2026-42167ProFTPD · CVSS 8.1 · 7.4% likely

    CWE-89

  2. In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap2_sql.c allows a remote attacker to inject arbitrary SQL co…CVE-2026-44331ProFTPD · CVSS 8.1 · 0.5% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in