Description
The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder.
References
- 3716 vdb-entry
- 20011218 FTPXQ default install read/write capabilities mailing-list
- ftpxq-default-permissions(7715) vdb-entry