Feed/CVE-2015-3306
CVE-2015-3306CRITICALCVSS 10.0CISA KEV: Actively Exploited

CVE-2015-3306

Published May 18, 2015·Updated Oct 9, 2026

NVD Description

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

Public Exploits & PoCs16 found

[POC] CVE-2015-3306 — exploit-CVE-2015-3306

ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container

33

[POC] CVE-2015-3306 — propane

Exploits the arbitrary file write bug in proftpd (CVE-2015-3306) attempts code execution

3

[POC] CVE-2015-3306 — cpx_proftpd

Tool for exploit CVE-2015-3306

2

[POC] CVE-2015-3306 — proftpd_bypass

An implementation of CVE-2015-3306

1

[POC] CVE-2015-3306 — CVE-2015-3306

ProFTPd 1.3.5 - File Copy

1

[POC] CVE-2015-3306 — CVE-2015-3306

This contains single-file exploit for ProFTPd 1.3.5 mod_copy (CVE-2015-3306) vulnerability, especially for TryHackMe Kenobi Lab.

[POC] CVE-2015-3306 — ProFTPd-1.3.5-mod_copy-Remote-Command-Execution

Script that exploits the vulnerability of the ProFTP 1.3.5 service with CVE-2015-3306

[POC] CVE-2015-3306 — CVE-2015-3306-

PoC for CVE-2015-3306 a arbitrary file write vulnerability in ProFTPd 1.3.5

[POC] CVE-2015-3306 — cve-2015-3306-lab

Reproducible Docker lab + raw-socket exploit for CVE-2015-3306 (ProFTPD mod_copy pre-auth arbitrary file copy) — a patch-diffing learning exercise

[POC] CVE-2015-3306 — CVE-2015-3306-Python-PoC

Converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development

PoC: OpenVAS-Vulnerability-Analysis-Incident-Response-Report

Real-World Simulation: FTP Service Exploitation (ProFTPD CVE-2015-3306)

PoC: proftpd-mod_copy-cve-2015-3306

Exploitation report for ProFTPD 1.3.5 mod_copy (CVE-2015-3306) lab.

PoC: CVE-2015-3306-Home-Lab

CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or Penetration Testing

PoC: hackviser_labs_CVE-2015-3306

This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab.

PoC: cve-2015-3306

cve-2015-3306 docker image

PoC: cve-2015-3306

cve-2015-3306

CVSS Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free