{"schema":"vulnpedia.poc/1","cve":"CVE-2015-3306","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-10-08","ransomware":false},"epss":{"score":0.99497,"percentile":0.99944},"cvss":{"version":"3.1","score":10,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/proftpd_modcopy_exec.rb","executable":true,"sourceId":"exploit/unix/ftp/proftpd_modcopy_exec","description":"ProFTPD 1.3.5 Mod_Copy Command Execution","verification":"catalogued","source":"metasploit","modified":"2026-04-22 11:59:31 +0000","origins":[{"source":"metasploit","sourceId":"exploit/unix/ftp/proftpd_modcopy_exec","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/proftpd_modcopy_exec.rb"},{"source":"metasploit","sourceId":"exploit/unix/ftp/proftpd_modcopy_exec","modified":"2026-04-22 11:59:31 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/proftpd_modcopy_exec.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/537c3491c145","executable":false,"sourceId":"537c3491c145","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"537c3491c145","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/537c3491c145"}],"repositoryUrl":"https://github.com/t0kx/exploit-CVE-2015-3306"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/167ef2696304","executable":false,"sourceId":"167ef2696304","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"167ef2696304","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/167ef2696304"}],"repositoryUrl":"https://github.com/cdedmondson/Modified-CVE-2015-3306-Exploit"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/7f464364a04f","executable":false,"sourceId":"7f464364a04f","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7f464364a04f","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/7f464364a04f"}],"repositoryUrl":"https://github.com/cd6629/CVE-2015-3306-Python-PoC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/37c8b5890c73","executable":false,"sourceId":"37c8b5890c73","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"37c8b5890c73","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/37c8b5890c73"}],"repositoryUrl":"https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f88c1ceda400","executable":false,"sourceId":"f88c1ceda400","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f88c1ceda400","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/f88c1ceda400"}],"repositoryUrl":"https://github.com/Z3R0-0x30/CVE-2015-3306"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/cf8a5b58ef63","executable":false,"sourceId":"cf8a5b58ef63","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"cf8a5b58ef63","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/cf8a5b58ef63"}],"repositoryUrl":"https://github.com/donmedfor/CVE-2015-3306"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/db77ad285709","executable":false,"sourceId":"db77ad285709","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"db77ad285709","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/db77ad285709"}],"repositoryUrl":"https://github.com/cybersensei-EH/hackviser_labs_CVE-2015-3306"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/5ca93f4359fe","executable":false,"sourceId":"5ca93f4359fe","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5ca93f4359fe","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/5ca93f4359fe"}],"repositoryUrl":"https://github.com/0xm4ud/ProFTPD_CVE-2015-3306"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/edac01077a79","executable":false,"sourceId":"edac01077a79","verification":"catalogued","source":"vulncheck-kev","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"edac01077a79","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/edac01077a79"}],"repositoryUrl":"https://github.com/diegslva/cve-2015-3306-lab"},{"kind":"exploitdb","id":"37262","url":"https://www.exploit-db.com/exploits/37262","code":"https://www.exploit-db.com/download/37262","executable":true},{"kind":"exploitdb","id":"36803","url":"https://www.exploit-db.com/exploits/36803","code":"https://www.exploit-db.com/download/36803","executable":true},{"kind":"exploitdb","id":"49908","url":"https://www.exploit-db.com/exploits/49908","code":"https://www.exploit-db.com/download/49908","executable":true},{"kind":"exploitdb","id":"36742","url":"https://www.exploit-db.com/exploits/36742","code":"https://www.exploit-db.com/download/36742","executable":true}],"poc_candidates":[{"url":"https://github.com/xyk0x/cpx_proftpd","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Tool for exploit CVE-2015-3306","modified":"2024-08-12T19:17:09Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/xyk0x/cpx_proftpd"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2024-08-12T19:17:09Z","url":"https://github.com/xyk0x/cpx_proftpd"}],"tags":[]},{"url":"https://github.com/nootropics/propane","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Exploits the arbitrary file write bug in proftpd (CVE-2015-3306) attempts code execution","modified":"2024-08-12T19:17:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/nootropics/propane"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2024-08-12T19:17:12Z","url":"https://github.com/nootropics/propane"}],"tags":[]},{"url":"https://github.com/t0kx/exploit-CVE-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container","modified":"2026-10-01T16:52:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/t0kx/exploit-CVE-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2026-10-01T16:52:06Z","url":"https://github.com/t0kx/exploit-CVE-2015-3306"}],"tags":[]},{"url":"https://github.com/davidtavarez/CVE-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"ProFTPd 1.3.5 - File Copy","modified":"2021-05-05T18:56:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/davidtavarez/CVE-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2021-05-05T18:56:50Z","url":"https://github.com/davidtavarez/CVE-2015-3306"}],"tags":[]},{"url":"https://github.com/cved-sources/cve-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"cve-2015-3306","modified":"2021-04-15T21:10:57Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/cved-sources/cve-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2021-04-15T21:10:57Z","url":"https://github.com/cved-sources/cve-2015-3306"}],"tags":[]},{"url":"https://github.com/hackarada/cve-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"cve-2015-3306 docker image","modified":"2023-09-20T06:51:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/hackarada/cve-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2023-09-20T06:51:13Z","url":"https://github.com/hackarada/cve-2015-3306"}],"tags":[]},{"url":"https://github.com/cdedmondson/Modified-CVE-2015-3306-Exploit","source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2020-05-15T18:12:23Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/cdedmondson/Modified-CVE-2015-3306-Exploit"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2020-05-15T18:12:23Z","url":"https://github.com/cdedmondson/Modified-CVE-2015-3306-Exploit"}],"tags":[]},{"url":"https://github.com/cd6629/CVE-2015-3306-Python-PoC","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development","modified":"2023-08-28T04:05:53Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/cd6629/CVE-2015-3306-Python-PoC"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2023-08-28T04:05:53Z","url":"https://github.com/cd6629/CVE-2015-3306-Python-PoC"}],"tags":[]},{"url":"https://github.com/0xm4ud/ProFTPD_CVE-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2021-12-02T17:50:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/0xm4ud/ProFTPD_CVE-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2021-12-02T17:50:12Z","url":"https://github.com/0xm4ud/ProFTPD_CVE-2015-3306"}],"tags":[]},{"url":"https://github.com/jptr218/proftpd_bypass","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"An implementation of CVE-2015-3306","modified":"2021-08-21T17:46:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/jptr218/proftpd_bypass"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2021-08-21T17:46:49Z","url":"https://github.com/jptr218/proftpd_bypass"}],"tags":[]},{"url":"https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Script that exploits the vulnerability of the ProFTPd 1.3.5 service with CVE-2015-3306","modified":"2024-04-18T18:13:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2024-04-18T18:13:27Z","url":"https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution"}],"tags":[]},{"url":"https://github.com/Z3R0space/CVE-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"This contains single-file exploit for ProFTPd 1.3.5 mod_copy (CVE-2015-3306) vulnerability, especially for TryHackMe Kenobi Lab.","modified":"2025-05-14T06:20:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/Z3R0space/CVE-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2025-05-14T06:20:46Z","url":"https://github.com/Z3R0space/CVE-2015-3306"}],"tags":[]},{"url":"https://github.com/donmedfor/CVE-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2025-08-23T16:41:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/donmedfor/CVE-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2025-08-23T16:41:40Z","url":"https://github.com/donmedfor/CVE-2015-3306"}],"tags":[]},{"url":"https://github.com/cybersensei-EH/hackviser_labs_CVE-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab.","modified":"2025-11-06T09:07:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/cybersensei-EH/hackviser_labs_CVE-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2025-11-06T09:07:49Z","url":"https://github.com/cybersensei-EH/hackviser_labs_CVE-2015-3306"}],"tags":[]},{"url":"https://github.com/netw0rk7/CVE-2015-3306-Home-Lab","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or Penetration Testing","modified":"2025-11-19T01:51:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/netw0rk7/CVE-2015-3306-Home-Lab"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2025-11-19T01:51:41Z","url":"https://github.com/netw0rk7/CVE-2015-3306-Home-Lab"}],"tags":[]},{"url":"https://github.com/canpilayda/proftpd-mod_copy-cve-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Exploitation report for ProFTPD 1.3.5 mod_copy (CVE-2015-3306) lab.","modified":"2026-01-18T18:16:55Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/canpilayda/proftpd-mod_copy-cve-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2026-01-18T18:16:55Z","url":"https://github.com/canpilayda/proftpd-mod_copy-cve-2015-3306"}],"tags":[]},{"url":"https://github.com/bcononugbor-source/OpenVAS-Vulnerability-Analysis-Incident-Response-Report","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Real-World Simulation: FTP Service Exploitation (ProFTPD CVE-2015-3306)","modified":"2026-06-08T10:10:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/bcononugbor-source/OpenVAS-Vulnerability-Analysis-Incident-Response-Report"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2026-06-08T10:10:14Z","url":"https://github.com/bcononugbor-source/OpenVAS-Vulnerability-Analysis-Incident-Response-Report"}],"tags":[]},{"url":"https://github.com/diegslva/cve-2015-3306-lab","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Reproducible Docker lab + raw-socket exploit for CVE-2015-3306 (ProFTPD mod_copy pre-auth arbitrary file copy) — a patch-diffing learning exercise","modified":"2026-09-07T20:44:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/diegslva/cve-2015-3306-lab"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2026-09-07T20:44:43Z","url":"https://github.com/diegslva/cve-2015-3306-lab"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2015-3306 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2015-3306 && searchsploit -m 37262","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2015-3306 && searchsploit -m 36803","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2015-3306 && searchsploit -m 49908","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2015-3306 && searchsploit -m 36742","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2015-3306/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2015/CVE-2015-3306.yaml","template":"network/cves/2015/CVE-2015-3306.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2015-3306%22&type=repositories","executable":false}]}