CVE-2013-7465

Ice Cold Apps Servers Ultimate 6.0.2(12) does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts.

• CWE-287

• http://www.vapid.dhs.org/advisories/ultimate-server-android-vulns.htmlExploit, Third Party Advisory
• http://www.vapidlabs.com/advisory.php?v=108Exploit, Third Party Advisory
• http://www.vapid.dhs.org/advisories/ultimate-server-android-vulns.htmlExploit, Third Party Advisory
• http://www.vapidlabs.com/advisory.php?v=108Exploit, Third Party Advisory

Published

Oct 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-7459Heap-based buffer overflow in the ALGnew function in block_t…
• CVE-2013-7460A write protection and execution bypass vulnerability in McA…
• CVE-2013-7461A write protection and execution bypass vulnerability in McA…
• CVE-2013-7462A directory traversal vulnerability in the web application i…
• CVE-2013-7463The aescrypt gem 1.0.0 for Ruby does not randomize the CBC I…
• CVE-2013-7464In csrf-magic before 1.0.4, if $GLOBALS['csrf']['secret'] is…
• CVE-2013-7466Simple Machines Forum (SMF) 2.0.4 allows local file inclusio…
• CVE-2013-7467Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.p…
• CVE-2013-7468Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection …
• CVE-2013-7469Seafile through 6.2.11 always uses the same Initialization V…
• CVE-2013-7470cipso_v4_validate in include/net/cipso_ipv4.h in the Linux k…
• CVE-2013-7471An issue was discovered in soap.cgi?service=WANIPConn1 on D-…9.8