🔴

CISA Known Exploited Vulnerability

This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.

CVE

CVE-2015-3306

10.0

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Updated Oct 12, 2026View on NVD →

S4E scanner

CVE-2015-3306 Scanner

CVE-2015-3306 scanner - Remote Code Execution (RCE) vulnerability in ProFTPD

Used 2.1k times · 3.4k assets checked · url

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.