{"id":"CVE-2015-3306","url":"https://compromised.live/t/CVE-2015-3306","kind":"exploited_vuln","tier":2,"severity":"high","title":"ProFTPD ProFTPD: ProFTPD Improper Access Control Vulnerability","summary":"Remote attackers can read and write arbitrary files on the server through the site cpfr and site cpto commands, and this flaw is being actively exploited. ProFTPD (ProFTPD server; no versions given in the advisory). Apply the vendor's update now and check for signs of compromise.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-10-08","due_date":"2026-10-11","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","aliases":["CVE-2015-3306"],"sources":[{"name":"kev","id":"CVE-2015-3306","url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3306"}]}