Back to the CVE list
CVE-2015-3306 CISA KEV · Actively exploitedSuited to automated attack · CISA

Improper access control in N/a

CVSS score

10.0

EPSS probability

%99.5

Risk score

19.9

Published

11 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Reproducible Docker lab + raw-socket exploit for CVE-2015-3306 (ProFTPD mod_copy pre-auth arbitrary file copy) — a patch-diffing learning exercise

Public PoCSource updated: 07.09.2026 20:44:43

Exploitation report for ProFTPD 1.3.5 mod_copy (CVE-2015-3306) lab.

Public PoCSource updated: 18.01.2026 18:16:55

CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or Penetration Testing

Public PoCSource updated: 19.11.2025 01:51:41

This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab.

Public PoCSource updated: 06.11.2025 09:07:49

donmedfor/CVE-2015-3306

Public PoCSource updated: 23.08.2025 16:41:40

This contains single-file exploit for ProFTPd 1.3.5 mod_copy (CVE-2015-3306) vulnerability, especially for TryHackMe Kenobi Lab.

Public PoCSource updated: 14.05.2025 06:20:46

cve-2015-3306 docker image

Public PoCSource updated: 20.09.2023 06:51:13

ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)

Exploit referenceSource updated: 26.05.2021 00:00:00

ProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)

Exploit referenceSource updated: 10.06.2015 00:00:00

ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution

Exploit referenceSource updated: 21.04.2015 00:00:00

ProFTPd 1.3.5 - File Copy

Exploit referenceSource updated: 13.04.2015 00:00:00

Nuclei: ProFTPd - Remote Code Execution

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2015-3306"