CVE-2023-33263

Summary: CVE-2023-33263 affects WFTPD 3.25, where usernames and password hashes are stored in an openly viewable wftpd.ini configuration file inside the WFTPD directory. What’s affected: WFTPD 3.25, specifically the wftpd.ini file that contains credentials in plaintext. Root cause / impact: Crede...

WFTPD 3.25 Credential Disclosure

Exploit Title: WFTPD 3.25 - Unprotected Credential Storage Date: 04/01/2023 Exploit Author: golem445 Vendor Homepage: https://www.texis.com/ Tested on: Windows 10 CVE: CVE-2023-33263 Description: Usernames and hashes are stored in an openly viewable wftpd.ini configuration file within the host...