What’s Vulnerable › Vulnerabilities

CVE-2005-1094

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-04-08 · updated 2026-06-16

Description

FTP Now 2.6.14 stores usernames and passwords in plaintext in sites.xml, which is world-readable, which allows local users to gain privileges.

References

• http://secunia.com/advisories/14889
• http://securitytracker.com/id?1013657
• http://www.osvdb.org/15296
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20025
• http://secunia.com/advisories/14889
• http://securitytracker.com/id?1013657
• http://www.osvdb.org/15296
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20025

Get alerted when CVE-2005-1094 or the next vulnerability affects your stack