CVE-2010-4149: Freshwebmaster Fresh FTP

High severity, CVSS 9.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information.

Affected products

• Freshwebmaster Fresh FTP: up to and including 5.37; version 5.36 only

Published 2010-11-02. Last modified 2026-06-16.