CVE-2019-25619

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite the return address and execute calc.exe or other commands.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
FtpshellFTP Shell Server6.83

References

Timeline

Published
Mar 22, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2019

CVE-2019-256205.5Tree Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed inpuCVE-2019-256215.5Pixel Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed inpCVE-2019-256225.5Paint Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed inpCVE-2019-256235.5Luminance Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformedCVE-2019-256245.5Liquid Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed inCVE-2019-256255.5Blob Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed inpuCVE-2019-256267.8River Past Cam Do 3.7.6 contains a local buffer overflow vulnerability in the activation code input field that allows local attackers to exeCVE-2019-256277.8FlexHEX 2.71 contains a local buffer overflow vulnerability in the Stream Name field that allows local attackers to execute arbitrary code bCVE-2019-256289.8Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers toCVE-2019-256297.8AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows locaCVE-2019-256308.8PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to uCVE-2019-256317.8AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbi
CVE-2019-25619: High severity, CVSS 7.8 | Vulnix