Description
FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.
References
- flashfxp-password-disclosure(10445) vdb-entry
- 20021022 FlashFXP 1.4 Local Password Disclosure Vulnerability mailing-list
- 6032 vdb-entry