CVE-2010-4153: Crossftp Pro

High severity, CVSS 9.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.

Affected products

• Crossftp Crossftp Pro: up to and including 1.65a; version 1.14 only; version 1.15 only; version 1.16 only; version 1.17 only; version 1.18 only; …

Published 2010-11-03. Last modified 2026-06-16.